IT Security Operations Engineer

IT Security Operations Engineer

Help us keep our systems secure, resilient and trusted

At Nisbets, technology plays a critical role in how we serve our customers and support our colleagues. As our IT Security Operations Engineer, you'll help protect our business by monitoring, maintaining and continuously improving the security controls that keep our systems, data and users safe.

This is a hands-on role where you'll work across a wide range of security technologies, investigating threats, responding to incidents and helping strengthen our overall security posture. Working closely with Infrastructure, Applications, Service Management, project teams and the wider security community, you'll play an important role in safeguarding our technology environment and ensuring compliance with key security standards.

You won't just be responding to alerts. You'll help improve security controls, reduce risk, strengthen governance and contribute to the ongoing development of our cyber security capabilities across the business.

Where you'll work

The role is based at our Fourth Way office in Avonmouth. As a hands-on operational security position, you'll work closely with colleagues across the business and participate in out-of-hours incident response activities when required. Just need to add about hybrid

What you'll get to work on

You'll have the chance to

• Monitor and investigate security alerts from internal tools and managed security providers.
• Coordinate the response to security incidents, supporting containment, remediation and recovery activities.
• Investigate phishing attempts, suspicious emails and emerging cyber threats.
• Configure, maintain and improve security technologies across our IT estate.
• Support the implementation of new security solutions, controls and enhancements.
• Manage vulnerability scanning activities and work with system owners to remediate findings.
• Support penetration testing and security assessments, ensuring actions are tracked through to completion.
• Help strengthen identity and access management through MFA, least privilege and privileged access controls.
• Contribute to maintaining our Information Security Management System (ISMS) and security certifications.
• Support internal and external audits, providing technical evidence and security expertise.
• Work with suppliers and technology partners to assess and manage security risks.
• Deliver security awareness activities including phishing simulations and colleague education programmes.
• Provide practical security guidance to both technical and non-technical stakeholders.

What you'll bring

We don't expect you to know everything, but you'll need a strong foundation in:

• Cyber security operations, security monitoring and incident response.
• Security technologies such as EDR/XDR, vulnerability management and identity security.
• Endpoint, server, network, cloud and SaaS security concepts.
• Investigating security alerts, vulnerabilities and technical issues.
• Security best practice, risk management and operational security controls.
• Producing clear technical documentation and communicating effectively with a range of stakeholders.
• Prioritising workloads, managing competing demands and working independently when required.

It would be great if you also have experience with:

• ISO 27001 environments and information security governance.
• GDPR, PCI DSS, Cyber Essentials and NCSC guidance.
• Vulnerability management and penetration test remediation.
• Third-party, supplier or cloud security assessments.
• ITIL service management principles.
• Industry certifications such as CompTIA Security+, Microsoft Security, CISSP, CISM or CEH.