Senior Cyber Security Engineer
About this role
We help retailers lower operating costs, improve billing accuracy for consumers, and enhance customer experience through automation and AI‑driven insight, all underpinned by modern, cloud‑native architecture. ENSEK is at an exciting inflection point as we scale at pace towards new international horizons. If you’re driven by solving complex, real‑world problems and want to protect resilient, cloud‑native platforms that accelerate the global energy transition, you’ll feel right at home with us. About the role As a Senior Cyber Security Engineer you will embed security into the DNA of our B2B SaaS platform. You’ll partner with Engineering, SRE, Risk and Product to build security into every part of our product lifecycle, enabling high‑velocity delivery without ever compromising trust or resilience. This is a hands‑on, high‑impact role. You’ll influence architecture, automate security controls, strengthen detection & response, and drive a measurable uplift in our security posture. You’ll define our standards, lead threat modelling, and champion secure‑by‑design practices across an engineering organisation that’s modernising rapidly and ready for your expertise. Key responsibilities: Security architecture & design: Collaborate with engineering and platform teams to design secure solutions, perform threat modelling and review designs for cloud, container and service‑based architectures. Cloud security: Define and enforce secure configurations, network segmentation, identity and access controls for public cloud (primarily AWS). Application & infrastructure hardening: Implement secure coding practices, vulnerability management, secrets management and runtime protections for services and CI/CD pipelines. Detection & response: Build and maintain monitoring, logging and alerting for security events; lead incident response and post‑incident reviews to drive remediation and lessons learned. Incident Management: Support ENSEK’s 24/7 Incident Management processes to ensure security and stability for clients. Automation & tooling: Automate security checks, policy enforcement and remediation using IaC, CI/CD integrations and custom tooling where appropriate. Compliance & assurance: Work with Risk, Legal and InfoSec to embed controls that support regulatory, privacy and contractual requirements across new territories. Key outcomes: Measurable risk reduction: Clear evidence of reduced exposure through vulnerability metrics, patch timelines and remediation actions. Robust detection capability: High‑fidelity alerts and shortened MTTD/MTTR for security incidents with thorough RCA and preventative measures. Secure-by‑design practices adopted: Engineering teams consistently apply threat modelling, secure coding and automated security gates. Compliance readiness: Security controls aligned with regulatory and contractual requirements for current and new markets. Experience required: 5+ years’ experience in cyber security within cloud‑native environments, DevOps or platform engineering contexts. Strong cloud security knowledge: Practical experience securing AWS services, IAM, networking, KMS/secrets and managed services. Container and orchestration security: Experience securing Kubernetes and related tooling (runtime protection, admission controllers, image scanning). Detection and monitoring: Hands‑on with logging, metrics and tracing for security use cases. Infrastructure as Code & automation: Proficient with Terraform/CloudFormation and CI/CD integration to enforce policy and automate remediations. Security Tooling: Hands on experience with Secure Web Gateways, IDP, IDS, EDR, SAST, DAST, WAF technologies. Scripting & development skills: Comfortable writing automation and tools in Python, Go, Bash or similar languages.
What this role is, and what else it is called
It is a senior Cybersecurity role in Nottingham, advertised as fully remote, so it is open to candidates working from home.
About hiring at ENSEK
ENSEK has 6 other live technology roles on its careers page, across DevOps, Platform & SRE, Software Engineering and Cybersecurity. Of those, 100% are advertised as fully remote and 0% as hybrid. Elsewhere in its adverts ENSEK asks for SQL, C#, Azure, Microsoft SQL Server and GitHub Actions. See all ENSEK roles, salaries and stack.
How this role compares to the market
1,965 live UK roles list Python right now, from 584 employers. The median advertised salary is £80,000; 30% are advertised as remote. Browse Python roles.
1,456 live UK roles list AWS right now, from 503 employers. The median advertised salary is £80,000; 28% are advertised as remote. Browse AWS roles.
Nottingham has 45 live IT vacancies across 23 employers, with a median advertised salary of £35,000. Browse Nottingham roles.
Senior roles make up 1,630 of the live UK IT market and advertise a median of £80,000.
Market figures are today's snapshot of live UK roles on employer careers pages; see hiring trends.
Technologies mentioned
Detected on ENSEK's careers page. ProdReady Recruitment lists this vacancy as an aggregator and is not the employer; applications go to the employer's own site. More IT jobs in East Midlands.