Birmingham City Council
Senior Security Engineer
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Senior Security Engineer
Senior Security Engineer
Grade D – Permanent £45,091 – £53,460 (Consultation grade - subject to formal evaluation under the Equal Pay Programme) 36.5 hours per week
Job Overview
As a Senior Security Engineer of a small and highly specialized team responsible for safeguarding the Council’s cybersecurity posture, you will play a critical role in protecting the organisation’s networks, systems, and information assets. The role demands strategic leadership in cybersecurity while supporting the professional development of team members.
You will lead the development, implementation, and continuous improvement of cybersecurity policies, standards, and procedures, ensuring compliance with regulatory requirements and industry best practices. Your responsibilities will include overseeing critical functions such as vulnerability management, penetration testing, risk assessments, and incident response, providing expert guidance and assurance to senior stakeholders.
A key focus will be building rapport across Digital and Technology Services and throughout the Council, influencing decision-making via communications such as reports, presentations, and briefings to senior management.
Collaborating closely with the Council’s outsourced Security Operations Centre (SOC) and strategic partners, you will oversee threat investigations, vulnerability management, and security incident responses to safeguard services, data, and users.
Additionally, you will take on people management responsibilities, including mentoring, fostering professional development, and ensuring the Council maintains a robust and adaptive security function.
Key Responsibilities
Strategic Leadership & Stakeholder Engagement
- Lead the development, implementation, and governance of the Council’s cybersecurity policies, standards, and procedures, ensuring they align with regulatory requirements, industry best practices, and organisational goals.
- Act as the primary escalation point for cybersecurity matters, providing expert guidance to senior leaders, managers, and operational teams.
- Build strong stakeholder relationships and influence effective risk management and mitigation alongside key decision-makers.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Operational Oversight & Incident Response
- Oversee the security monitoring capabilities of the Council, ensuring tools, controls, and processes function effectively.
- Lead the investigation, prioritisation, and resolution of security incidents, vulnerabilities, and emerging threats, escalating significant risks appropriately.
- Coordinate cyber incident response, including participation in out-of-hours on-call duties and SOC escalations, ensuring timely stakeholder communication and risk mitigation.
Team Leadership & Development
- Provide management support to cybersecurity staff, fostering a high-performing team culture through mentoring, coaching, and professional development.
- Drive succession planning and continuous improvement of the Council’s security capabilities.
Continuous Improvement & Reporting
- Lead regular reviews of the cybersecurity framework, policies, and controls to address evolving threats, legislative changes, and lessons learned.
- Prepare tailored reports, risk assessments, and performance updates for senior leadership, governance boards, and key stakeholders to enhance assurance on the Council’s security posture.
Core Team Obligations
The role involves ensuring the security of the Council’s IT systems through:
- Conducting regular vulnerability scans.
- Coordinating with other departments to address issues promptly.
- Supporting new and ongoing projects to embed robust security measures, including arranging penetration tests for web applications.
- Overseeing the phishing testing and awareness program, reporting outcomes to senior management.
Essential Skills & Experience
- *Technical Security Expertise:
- Hands-on knowledge of security issues relating to hardware and software.
- Familiarity with the Microsoft technology stack.
- Experience with network and database security tools.
- *Compliance & Standards:
- Deep understanding of ISO 27001 and other information security best practices.
- Specialised Security Areas:
- Storage Area Network (SAN) security, cloud security, patch management, and application security.
- Knowledge of DevOps/SecOps practices and culture, including associated methodologies.
- Network security and infrastructure security experience.
- *Monitoring & Auditing:
- Practical experience configuring and using network/internet audit and monitoring tools.
- Ability to manage reporting and auditing functionalities in security tools.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
What We Offer You
We believe in curiosity, autonomy, and transparency— preserving an environment where your ideas can thrive.
- Engaging leadership with a clear vision and a commitment to developing talent.
- Training and development opportunities to help you grow professionally.
- An inclusive workplace that reflects the diversity of the communities we serve.
- A holistic benefit package designed to support a balanced and fulfilling work life.
- Exposure to all digital and technology teams within the Council, allowing for broad expertise development.
Application & Additional Notes
- Upload your up-to-date CV via the “attachments” section—it is required for shortlisting.
- Applications without a CV cannot be considered.
Birmingham City Council is an accredited Disability Confident Leader employer and is committed to equality, diversity, and inclusion. If you require reasonable adjustments, additional support, or accessibility clarification, please disclose this during your application. Contact Resourcing@birmingham.gov.uk, quoting reference [4402].
Legal & Compliance Requirements
- DBS check will be undertaken.
- Proof of right to work in the UK is required before offer confirmation.
- The Council is safeguarding-committed, and the Corporate Safeguarding Policy applies.
- Sponsorship is not available—applicants must have unrestricted work rights in the UK.
For more details, refer to the Job Description & Person Specification.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills