Information Security Engineer

Job Description

We’re recruiting a Information Security Engineer to support the Chief Information Security Officer in managing and reducing information security risks across Technology Services.

This is a hands-on, technical engineering role where you’ll help design, build and continuously improve the security controls, platforms and infrastructure that protect AJ Bell and our customers. You’ll be at the forefront of how we evolve our security capability, making sure our tools, systems and integrations are not only secure, but scalable, automated and effective.

In many ways, you’ll be a builder of our security foundations, helping ensure we can detect, prevent and respond to threats at pace while enabling the business to move safely and confidently.

Key responsibilities

Design, delivery and ongoing improvement of enterprise security solutions across endpoint, cloud, network, DevOps and security monitoring environments. Design and implement secure infrastructure controls aligned to industry best practice, ensuring scalability, resilience and operational effectiveness. Evaluate, select and implement new security tools and platforms, driving automation, integration and measurable value across the estate. Adoption of new security technologies, ensuring smooth transition into operational support and long-term sustainability. Oversee patch management across systems and hardware, ensuring effective coordination and risk reduction. Support server hardening and secure configuration initiatives in collaboration with Infrastructure and Service Delivery teams. Provide security oversight across projects and change initiatives, ensuring security is embedded from design through to delivery. Support audits, regulatory reviews and due diligence activities, ensuring evidence and controls are robust and well maintained. Act as a key technical link between the CISO function and Infrastructure teams, ensuring alignment across security and operational delivery. Contribute to continuous improvement of cybersecurity risk management processes, helping to enhance maturity across the organisation.

About you

Technical expertise

Proven experience implementing enterprise security platforms Strong knowledge of security risk management tools and techniques Deep understanding of security solutions (e.g. SIEM, PAM, IGA, endpoint protection, email/web gateways) Experience with firewall technologies (desirable) Knowledge of cloud security standards and solutions (desirable) Strong understanding of core IT and networking principles Awareness of the evolving threat landscape