Senior Cyber Security Engineer
Not disclosed
Salary
Not disclosed by employer
£48,500
Going rate
Skilled Worker going rate
This role likely qualifies for a Skilled Worker visa
Our predicted code SOC 2135 (86% match) is an eligible occupation, with a going rate of £48,500, and Ensek Ltd is a licensed sponsor. That is our reading of the published rules. Whether they issue a Certificate of Sponsorship is still their call.
About the role
ENSEK builds the cloud‑native SaaS software that’s transforming how energy retailers operate, innovate and manage at scale. We help retailers lower operating costs, improve billing accuracy for consumers, and enhance customer experience through automation and AI‑driven insight, all underpinned by modern, cloud‑native architecture.
ENSEK is at an exciting inflection point as we scale at pace towards new international horizons. If you’re driven by solving complex, real‑world problems and want to protect resilient, cloud‑native platforms that accelerate the global energy transition, you’ll feel right at home with us.
About the roleAs a Senior Cyber Security Engineer you will embed security into the DNA of our B2B SaaS platform. You’ll partner with Engineering, SRE, Risk and Product to build security into every part of our product lifecycle, enabling high‑velocity delivery without ever compromising trust or resilience.
This is a hands‑on, high‑impact role. You’ll influence architecture, automate security controls, strengthen detection & response, and drive a measurable uplift in our security posture. You’ll define our standards, lead threat modelling, and champion secure‑by‑design practices across an engineering organisation that’s modernising rapidly and ready for your expertise.
Key responsibilities:Security architecture & design: Collaborate with engineering and platform teams to design secure solutions, perform threat modelling and review designs for cloud, container and service‑based architectures.
Cloud security: Define and enforce secure configurations, network segmentation, identity and access controls for public cloud (primarily AWS).
Application & infrastructure hardening: Implement secure coding practices, vulnerability management, secrets management and runtime protections for services and CI/CD pipelines.
Detection & response: Build and maintain monitoring, logging and alerting for security events; lead incident response and post‑incident reviews to drive remediation and lessons learned.
Incident Management: Support ENSEK’s 24/7 Incident Management processes to ensure security and stability for clients.
Automation & tooling: Automate security checks, policy enforcement and remediation using IaC, CI/CD integrations and custom tooling where appropriate.
Compliance & assurance: Work with Risk, Legal and InfoSec to embed controls that support regulatory, privacy and contractual requirements across new territories.
Measurable risk reduction: Clear evidence of reduced exposure through vulnerability metrics, patch timelines and remediation actions.
Robust detection capability: High‑fidelity alerts and shortened MTTD/MTTR for security incidents with thorough RCA and preventative measures.
Secure-by‑design practices adopted: Engineering teams consistently apply threat modelling, secure coding and automated security gates.
Compliance readiness: Security controls aligned with regulatory and contractual requirements for current and new markets.
5+ years’ experience in cyber security within cloud‑native environments, DevOps or platform engineering contexts.
Strong cloud security knowledge: Practical experience securing AWS services, IAM, networking, KMS/secrets and managed services.
Container and orchestration security: Experience securing Kubernetes and related tooling (runtime protection, admission controllers, image scanning).
Detection and monitoring: Hands‑on with logging, metrics and tracing for security use cases.
Infrastructure as Code & automation: Proficient with Terraform/CloudFormation and CI/CD integration to enforce policy and automate remediations.
Security Tooling: Hands on experience with Secure Web Gateways, IDP, IDS, EDR, SAST, DAST, WAF technologies.
Scripting & development skills: Comfortable writing automation and tools in Python, Go, Bash or similar languages.
25 days’ holiday + bank holidays
Option to buy or sell 5 extra annual leave days per year
Vitality Health Insurance, including private healthcare, virtual GP access and mental‑health support
Pension with 5% matched contribution
Regular team‑wide and company‑wide events
2 volunteering days per year
Remote‑first working environment (within the UK) with offices in London and Nottingham
This description is the source posting as it read when we added it. We are not affiliated with Ensek Ltd, so check their own site for the current details.
Where this offer sits in the market
SOC 2135 · UK · ONS ASHE 2025 · ~26k in sampleSimilar sponsored roles
See all jobsNo close matches live right now.
Browse more sponsored jobs at Ensek LtdAbout sponsorship for this role
Does this job guarantee visa sponsorship?
Not necessarily. Ensek Ltd holds a sponsor licence, but sponsorship for a specific hire is always the employer's decision. Be upfront in your application that you'll require it.
What salary is needed for this role to be eligible?
The offer must clear both the general threshold and the SOC 2135 going rate of £48,500. New-entrant and shortage discounts can lower it.