Lead Security EngineerWinston Fox · London Area, United Kingdom

Lead Security Engineer

🗓️ Posted 2026-09-07 London Area, United Kingdom Full-time Hybrid ICT
💰 Salary 20,833 GBP–25,000 GBP/mo (250,000 GBP–300,000 GBP/yr) 📊 Market 5,833 GBP–8,333 GBP/mo

About the Company

We are looking to recruit an exceptional Security Engineer and are willing to pay an annual compensation of 250k- 300k and a loaded benefits package for a great candidate Please read the advert before applying Security shouldn't slow engineering down. It should enable it. We're looking for an exceptional Security Engineer to help secure the technology platform behind one of the world's leading investment firms. This is a hands-on engineering role where you'll work across cloud, identity, endpoints and infrastructure to build security that is automated, scalable and secure by design. You'll work at the heart of our Infrastructure Engineering team-not hidden away in a traditional security function-partnering with Platform, Network and Cloud Engineers to embed security into everything we build. This role is fully hands-on, and we expect a prolific engineer who is dedicated to engineering excellence to fill this position. This is a chance to shape the future of security in a modern, cloud-first environment where engineering excellence matters, automation is expected, and continuous improvement is part of the culture. This isn't a ticket-driven SOC role. You'll become one of the firm's lead specialists, helping protect a global technology platform spanning: You'll improve the platform every day-not simply respond when something goes wrong. Build systems that are: Ground-floor opportunity to build security into every layer of a world-class technology platform. You'll work alongside exceptional Infrastructure, Cloud and Platform Engineers solving complex technical challenges where resilience, security and engineering quality have direct business impact. You'll have real influence over architecture, tooling and security strategy-not simply operate someone else's platform. If you're excited by modern cloud security, automation, infrastructure engineering and solving genuinely difficult technical problems, we'd love to talk.

Responsibilities

  • ● Designing and continuously improving detection, monitoring and response capabilities across modern SIEM and EDR platforms
  • ● Leading the investigation and technical response to complex security incidents alongside our managed service provider
  • ● Owning vulnerability management-from discovery and risk assessment through to remediation and verification
  • ● Securing endpoints, identities and privileged access using Entra ID, Active Directory, Conditional Access and modern identity controls
  • ● Designing secure cloud environments across AWS and Azure, including IAM, guardrails, logging and secure-by-default architectures
  • ● Hardening endpoints, servers and cloud infrastructure using industry best practices and security baselines
  • ● Building automation using Python, PowerShell and Infrastructure-as-Code to eliminate manual operational work
  • ● Partnering with Infrastructure, Cloud and Network Engineering teams to embed security into every architectural decision
  • ● Leading the charge on complex troubleshooting and technical problem-solving
  • ● Evaluating new security technologies and continuously improving the firm's defensive capabilities
  • ● Developing incident response playbooks, technical documentation and operational standards
  • ● Helping engineers and users alike understand security through practical advice-not fear, uncertainty or bureaucracy
  • ● You're an engineer first. Demonstrably passionate about technology and security
  • ● Security is your specialism. Deep expertise, both high and low level
  • ● You enjoy building things. Dedicated to engineering excellence
  • ● You automate anything. Ideally you code and script yourself and don't rely on vendor products
  • ● You understand risk but avoid unnecessary complexity.
  • ● You care about and have genuine experience creating secure platforms, rather than simply enforcing policy.
  • ● Deep Security Engineering expertise (Infrastructure, Cyber, Info, Cloud)
  • ● SIEM and EDR platforms
  • ● Identity security including Entra ID, Active Directory and Conditional Access
  • ● AWS and/or Azure security architecture
  • ● IAM, logging, guardrails and cloud-native security controls
  • ● Vulnerability management and risk-based remediation
  • ● Firewalls, segmentation and Zero Trust networking
  • ● Python or PowerShell automation
  • ● Infrastructure-as-Code