Security Engineer

Company Description Telefónica Tech (part of the Telefónica Group) is a leading NextGen Tech solutions provider with a highly diversified team of over 6,000 exceptionally skilled employees and +60 nationalities. We serve more than 5.5m customers every day in over 175 countries, with a global ecosystem of market-leading partners. Global strategic hubs: Spain, Brazil, the UK, Germany. The Telefónica Tech UK&I hub has an end- to-end portfolio of market leading services and develops integrated technology solutions to accelerate digital transformation through: Cloud, Data & AI, Enterprise Applications, Digital Workplace and Cyber Security & Networking. We protect enterprise and public sector organisations across the UK with a broad portfolio of Managed Security Services, advisory and professional services, and UK-based 24x7 SOC operations. Our approach combines deep expertise, service excellence, and the global scale of Telefónica. We’re also supported by Telefónica Tech Spain, one of the most advanced cybersecurity providers in Europe, giving us access to additional delivery capacity, innovation, and intelligence. Values: Open, Bold, Trusted We don’t believe hiring is a tick box exercise, so if you feel that you don’t match the job description 100%, but would still be a great fit for role, please get in touch. Trusted Partners: Microsoft: Top 3 Service Providers, Azure Expert Status, Fastrack & Inner Circle Partner HPE: Platinum Partner – FY23 UK&I Solution Provider of the Year Palo Alto & Crowdstrike: part of our NextDefense Cyber Security Portfolio Fortinet: Elite VIP Program – one of only 2 in the UK AWS: Advanced Solution & Managed Service Provider Program Job Description Security Engineer - Manchester, Flexible Working We're looking for a detail-oriented and analytical Security Engineer to join our team. In this role, you will be responsible for designing, implementing, and maintaining comprehensive security solutions to protect our organization's critical infrastructure, data, and systems. You will work collaboratively with cross-functional teams to identify security vulnerabilities, respond to threats, and ensure compliance with industry standards and regulations. The ideal candidate will demonstrate strong technical expertise, a methodical approach to problem-solving, and a commitment to staying current with evolving security threats and technologies. Design, deploy, and maintain security infrastructure including firewalls, intrusion detection systems, and security information and event management (SIEM) platforms Conduct vulnerability assessments and penetration testing to identify security weaknesses in systems and networks Analyze security logs and alerts to detect and investigate potential security incidents and threats Develop and implement security policies, procedures, and hardening standards to ensure systems meet organizational and regulatory requirements Respond to security incidents by analyzing root causes, containing threats, and implementing remediation measures Perform risk assessments to evaluate potential security threats and recommend mitigation strategies Collaborate with IT and development teams to integrate security best practices into system design and deployment processes Monitor and evaluate emerging security threats and technologies to recommend improvements to the security posture Document security configurations, incidents, and resolutions to maintain organized and comprehensive security records Support compliance initiatives by ensuring systems adhere to relevant security standards and frameworks Qualifications Required Skills and Experience Proven experience in network security, system security, or information security roles Strong knowledge of security protocols, architectures, and best practices Hands-on experience with security tools and technologies (firewalls, IDS/IPS, SIEM, vulnerability scanners) Proficiency in analyzing and interpreting security logs and network traffic Solid understanding of operating systems (Windows, Linux) and network fundamentals Experience with vulnerability assessment and penetration testing methodologies Knowledge of security compliance frameworks and standards (ISO 27001, NIST, PCI-DSS) Strong analytical and problem-solving skills with meticulous attention to detail Excellent organizational and documentation skills Ability to work efficiently under pressure and manage multiple priorities Preferred Skills and Experience Security certifications such as CISSP, CEH, Security+, or GIAC Experience with cloud security platforms and technologies Knowledge of scripting or programming languages (Python, Bash, PowerShell) Familiarity with security automation and orchestration tools Experience in incident response and digital forensics Understanding of secure coding practices and application security Knowledge of threat intelligence and advanced persistent threat (APT) analysis Additional Information At Telefónica Tech, we believe inclusion is the bridge that empowers everyone to be their authentic selves. We celebrate and respect our differences because diversity drives innovation and makes us stronger.