Security Engineer

GB Bank Limited; Greater London; Hybrid; GBP 60,000 - 80,000; Full time

Job summary

A fast-growing UK bank is seeking a Security Engineer to enhance its security posture. Responsibilities include managing security tools, monitoring threats, and ensuring compliance with frameworks such as GDPR and ISO 27001. The ideal candidate should have over 5 years of experience in enterprise security with a strong background in cloud platforms like Azure and AWS, as well as significant expertise in Cisco security technologies. The role is office-based in London with generous benefits and a commitment to team collaboration.

Benefits

8% company pension contribution

25 days holiday plus bank holidays

Private medical cover

Death in service benefit

Mental health support

Enhanced family leave

Qualifications

• 5+ years' experience in Microsoft 365 security.
• Hands-on experience with Azure and AWS.
• Experience with Cisco firewalls and VPNs.
• Strong understanding of zero-trust architecture.
• Experience with GDPR and ISO compliance.

Responsibilities

• Oversee and improve core infrastructure security.
• Implement and maintain security tools and controls.
• Monitor alerts and coordinate incident response.
• Lead penetration testing activities.
• Develop security policies and documentation.

Skills

Microsoft 365 enterprise security

Cloud platforms (Azure, AWS)

Microsoft Sentinel

Cisco network security technologies

Zero-trust security architecture

GDPR and ISO 27001 standards

Security awareness programs

Data systems optimisation

Documentation best practices

Collaborative development

Education

Relevant security certifications (Microsoft Security, CISSP, OSCP, GIAC, CEH, Security+)

Job description

About us

Join one of the UK’s fastest growing and award-winning banks.

We are a team of ambitious, passionate, hardworking, and committed people who have successfully created and launched one of the UK’s newest specialist property finance banks. As we embark on an exciting journey of growth, we are seeking exceptional new team members who possess both the ambition and drive to contribute to our vision. At GB Bank, we believe that career progression should not only be achievable but accelerated, enabling our employees to reach their potential in a supportive and dynamic atmosphere.

Our environment is fast‑paced and collaborative, where your efforts are recognised, rewarded, and make a tangible impact. We take pride in fostering an open and inclusive culture that not only embraces change but also encourages continuous learning and professional development.

In this role, you will:

The Security Engineer is responsible for providing in‑house security expertise and overseeing relationships with outsourced security service providers. The role focuses on strengthening the configuration and security of GB Bank’s core infrastructure and security platforms, while acting as a technical subject matter expert across key SaaS and PaaS environments. This role will work closely with technology stakeholders, will support the development and execution of effective security and technology strategies.

Key areas of responsibility:

• Act as the in‑house subject matter expert for information security, providing specialist guidance and support to the IT team.
• Design, implement, and maintain security tools, technologies, and controls across infrastructure, networks, and applications.
• Monitor security alerts, investigate incidents, and coordinate effective response and remediation activities in collaboration with the outsourced Security Operations Centre (SOC).
• Build, automate, and continuously improve security processes, including logging, threat detection, identity and access management (IAM), patching, and backup controls.
• Manage and enhance identity and access controls, ensuring adherence to least privilege and zero‑trust principles.
• Lead security reviews and penetration testing activities, tracking remediation actions through to completion.
• Develop and maintain security policies, standards, procedures, and technical documentation.
• Stay up to date with emerging threats, vulnerabilities, exploits, and industry best practices, proactively assessing their potential impact.
• Support standardised, secure system builds aligned with recognised frameworks (e.g. CIS benchmarks) and contribute to compliance initiatives such as ISO 27001, GDPR, and other relevant regulatory requirements.

A bit about you – You are/have:

• 5+ years’ of experience working with Microsoft 365 enterprise security capabilities, including identity, compliance, and threat protection features.
• Strong technical understanding of operating systems and cloud platforms, with hands‑on experience across Azure and AWS environments.
• Practical experience implementing and operating Microsoft Sentinel, including alerting, investigation, and response workflows.
• Experience working with Cisco network security technologies, such as firewalls, VPNs, and intrusion prevention solutions.
• Solid understanding of zero‑trust security architecture and modern identity platforms.
• Experience working within privacy, governance, and regulatory frameworks, with exposure to standards such as GDPR and ISO 27001.
• Demonstrated ability to design and deliver internal security awareness and education programmes.
• Relevant security certifications (e.g. Microsoft Security, CISSP, OSCP, GIAC, CEH, Security+) or equivalent practical experience.
• Ability to work collaboratively whether it’s gathering requirements from business teams or collaborating with engineers to deliver the right solution.
• Experience optimising data systems for performance and efficiency, and you're always looking for ways to make things run smoother and faster.
• You take pride in writing clear, useful documentation, and following (or helping define) best practices for data transformation and modelling.
• Ability to work in collaborative environments, participating in code reviews, and sharing ideas to continuously improve the team’s output. Evidence of working closely with the management team to prioritise business and information needs for data.
• Strong entrepreneurial and team spirit, balanced by a healthy sense of autonomy.

What we can offer you:

• 8% company pension contribution and 3% individual contribution (which you can opt to increase)
• 25 days holiday every year plus bank holidays on top
• Private medical cover with BUPA - includes no excess and you can add family
• Death in service at 4 x base salary with Aviva
• Mental health support - through a helpline and counselling sessions
• Enhanced maternity, paternity and adoption leave

What else do I need to know?

• Location: London-based (3+ days in the office)
• Salary: Competitive
• Hours: 35 Hours per week

We are an equal opportunities employer and positively encourage applications from suitably qualified and eligible candidates, regardless of their age, sex, race, disability, sexual orientation, gender reassignment, religion or belief, marital/civil partnership status, or pregnancy and maternity.

At GB Bank, we value privacy and data protection rights. We have longstanding data protection culture and promote robust ethical standards in data management. Please read our Privacy Notice in relation to our recruitment activities before submitting your application to work with us.