The Beauty Tech Group Trading Limited
Senior Cyber Security Engineer
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Senior Cyber Security Engineer
We are looking for an experienced, hands-on Senior Cyber Security Engineer to take technical ownership of our security tooling and controls. As the first dedicated cyber security hire in a growing in-house IT and Security function, you will report directly to the Head of IT & Security. This is a high autonomy role with a genuine voice in shaping our security strategy: not executing someone else’s playbook, but helping to write it.
You will own the configuration, hardening, and continuous improvement of our defensive stack across a modern Microsoft and Google estate, working hands-on day-to-day while partnering with the wider business to keep a fast-growing, global organization secure and resilient. As the function matures, there is a clear path for the right person to grow the role and, in time, a team around them.
What you’ll be doing
Security Operations & Tooling Ownership
- Endpoint & Device Strategy: Own the technical configuration, lifecycle management, and policy optimization of endpoint security tooling and enterprise mobile device management (MDM/MAM), namely Microsoft Intune and Defender.
- Identity & Access Management: Harden and manage Identity & Access Management (IAM) baselines across our core collaboration ecosystems (including Microsoft 365 and Google Workspace), ensuring strict adherence to the Principle of Least Privilege.
- Authentication & Email Hardening: Optimize modern authentication types (Windows Hello, macOS Platform SSO), secure application API permissions and Entra Enterprise App Registrations, and advance our email filtering policies ensuring our SPF, DKIM, and DMARC records are correctly provisioned and optimal.
- Network Foundations: Support network security objectives, contributing technical oversight to core networking principles, network segmentation, wireless authentication, and secure access pathways.
Incident Response & Vulnerability Execution
- Threat Mitigation: Act as the primary internal technical interface for our Managed Detection and Response (MDR) platform, coordinating rapid threat isolation, host containment, and system tuning.
- Vulnerability Lifecycle: Deploy and manage vulnerability management tooling, taking ownership of patch remediation, configuration audits, and threat tracking across the estate to systematically close technical blind spots.
- Resilience Planning: Assist in the design, technical testing, and documentation of operational incident response playbooks and isolated system backup verification procedures.
- Continuous Tuning: Maintain and optimize anti-malware and filtering controls so that security standards balance effectively against user productivity.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Governance, Continuity & Collaboration
- Change Control: Adhere to and champion strict internal change control processes so that security enhancements and maintenance do not disrupt operational continuity.
- Security by Design: Partner with wider business units to conduct lightweight security and technical risk assessments on new third-party SaaS vendors and systems prior to onboarding.
- Compliance Telemetry: Support the Head of IT & Security with evidence gathering, audit tracking, and data telemetry to validate our ongoing cyber resilience and company disclosure obligations.
- Security Culture: Promote a culture of accountability and security awareness, including the coordination and technical execution of data-driven internal phishing simulation exercises.
Skills, knowledge & expertise
Essential
- Hands-on experience administering and hardening the Microsoft stack Intune, Defender for Endpoint, and Entra ID as the core of a live endpoint and identity estate.
- Strong working knowledge of modern identity and access management: authentication protocols, conditional access, Entra app registrations, and the Principle of Least Privilege.
- A track record of operating independently in a security or senior infrastructure role, comfortable owning and driving work with minimal oversight.
- A clear communicator who can explain technical reasoning to non-technical colleagues and constructively challenge decisions, including upward.
Desirable
- Experience administering and hardening Google Workspace alongside Microsoft 365.
- Familiarity with federated identity and modern authentication methods AML/OIDC, Windows Hello for Business, and macOS Platform SSO.
- Working knowledge of email authentication SPF, DKIM, and DMARC.
- Experience working alongside an external MDR/SOC partner for detection and incident response.
- A grounding in network security fundamentals, segmentation, wireless authentication, and secure access, ideally on Cisco Meraki.
- Hands-on experience with vulnerability management tooling and patch/remediation workflows.
- Awareness of security governance and compliance evidence work, such as supporting audit and disclosure obligations.
- Relevant certifications (e.g. Microsoft SC-200, SC-300, or AZ-500, or equivalent).
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Why work at The Beauty Tech Group
At The Beauty Tech Group, we’re redefining the future of beauty by bringing cutting-edge technology into homes around the world. Born from CurrentBody and now home to category-leading brands including CurrentBody Skin, ZIIP Beauty, Tria Laser, and CurrentBody Skin: The Clinic, we innovate at pace to create transformative devices and skincare solutions used globally.
Our brands combine clinical credibility with consumer-focused design, spanning LED, radio frequency, microcurrent, and laser technologies, and are trusted by customers in over 80 countries.
Working here means building your career in an environment where you’re empowered to develop deep expertise, take ownership of your impact, and think big as part of a fast-growing, ambitious business. We’re looking for exceptional people to join us at an exciting stage and help shape the next generation of beauty technology brands.
What’s in it for you
- 25 days holiday (increasing with service) + Holiday Buy scheme
- Auto-enrolment pension scheme
- Work from home every Wednesday
- Onsite café, gym, and free parking
- Staff discounts across CurrentBody Skin, ZIIP Beauty, and Tria Laser
- Subsidised travel, Cycle to Work, and EV/tech schemes
- Supported studies, Employee Assistance Programme, and enhanced family leave
- Social events, office brunches, and career development opportunities
Recruitment process
- Application reviewed by the Talent Acquisition team
- Initial call with the Talent Acquisition team
- Video interview with the hiring manager
- In-person interview at the office (including a short task)
At The Beauty Tech Group, we are committed to creating a diverse and inclusive workplace where everyone feels valued and empowered to succeed. We welcome applications from all backgrounds and experiences.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills