How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Kennedys is looking for Security Engineer
Kennedys is looking for a Security Engineer to join Kennedys, who will be a vital member of our newly established SecOps team, reporting directly to the IT Security Manager. This position is crucial in implementing and maintaining robust security measures across our technology landscape, as well as managing incident response.
The role involves developing, implementing, and sustaining security solutions designed to protect our systems against constantly evolving cyber threats, with a focus on transitioning to a zero-trust operating model. The Security Engineer will work collaboratively across IT functions, spearhead key security initiatives, and play a pivotal role in enhancing our overall security posture. The role will also support the firm in its pursuit of ISO 27001 certification and the implementation of CIS controls.
Team
Kennedys' IT team is responsible for the maintenance of IT systems and security across the firm, including its portfolio of managed bespoke and off-the-shelf applications. This role will work across all IT functions and, in the case of broader projects, occasionally with other business functions within the firm.
The majority of the global IT team are based in London and Chelmsford, although some staff are based in other UK and non-UK offices. As a team that provides a truly global service, the team are used to working flexibly and remotely.
Key Responsibilities
- Maintain and optimise the Security platform, including configuring EDR policies, tuning SIEM rules, and optimising the system for performance
- Monitor for security threats, analyse alerts, and respond to incidents using security tools; conduct vulnerability scans and support remediation and risk mitigation efforts
- Lead and participate in incident response efforts, conducting root cause analysis and developing runbooks for incident handling
- Oversee WAF, DDoS, VPN, and perimeter firewalls
- Manage Email and Web Security Gateways
- Maintain security certificates, encryption keys, and IDS/IPS systems
- Perform security scanning and vulnerability management, taking proactive steps to reduce operational risk
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Infrastructure & Identity
- Work with network engineers to implement posture management, including ICE/NAC segmentation, lateral movement control, and firewalls
- Work with the Endpoints team to administer MFA, SSO, PAM, MDM/MAM, and Conditional Access
- Manage Identity and Access Management (IAM) solutions
- Develop and deploy automation tools and scripts to streamline common IT Security Operations tasks
Collaboration & Governance
- Collaborate with third-party penetration testers to identify, prioritise, and remediate security vulnerabilities
- Create detailed reports on detected threats, incidents, and response actions; document configurations, processes, and runbooks
- Keep well-informed of the latest cybersecurity trends, emerging threats, and updates
- Comply with all relevant legal and regulatory obligations including the Solicitors Regulation Authority (SRA) Standards, Regulations, and Principle
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Required Experience
- EDR – platform management, EDR policy configuration, and SIEM tuning
- Microsoft Security: Defender (ATP), Azure Security Centre, Entra ID, Intune, Conditional Access
- Next Gen firewalls: Palo Alto Prisma (preferred) or similar - configuration and management
- Email security: Mimecast, Exchange Online, DMARC, and email DLP (Tessian or equivalent)
- Identity and Access Management: CyberArk, Entra ID, SSO, MFA, and PAM solutions
- SIEM tooling: Sentinel, Exabeam, Splunk, or equivalent
- Vulnerability management: Tenable or equivalent enterprise toolsets
- Scripting and automation: PowerShell (preferred), KQL, or similar
- Data Loss Prevention (DLP) solutions including MS Purview Compliance Manager
- Certified Information Systems Security Professional (CISSP), desirable
- CREST Practitioner Security Analyst (CPSA), desirable
- Palo Alto Networks Certified Security Operations Professional, desirable
- CEH, OSCP, SANS, or ISACA certifications are also welcomed
Please let us know if you require any additional support or adjustments to be made in order to submit your application to Kennedys.
where a level of experience is indicated, this is a guideline only and represents the amount of time we would usually expect a candidate to accumulate the requisite level of experience. This does not preclude applications from candidates with more or less experience.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Location