Information Technology Security Specialist

IT Security Specialist Up to £65,000 + Benefits Permanent | Fully Remote – UK

Overview An exciting opportunity has arisen for an experienced IT Security Specialist to join a growing, purpose-driven organisation operating within the life sciences and technology sector. The successful candidate will take ownership of the organisation's security infrastructure, controls and tooling, ensuring a secure, resilient and well-managed cloud environment. You will play a hands-on role in managing and improving security across Microsoft 365, Azure and associated cloud platforms, supported by an external Security Operations Centre (SOC). This is an excellent opportunity for a technically strong security professional who enjoys combining operational security, cloud technologies, automation and continuous improvement.

Role & Responsibilities

Take operational ownership of security infrastructure and tooling across Microsoft 365, Azure, Entra ID, Intune, Defender, Sentinel and Purview Manage vulnerability assessments, remediation and patch management using Qualys VMDR and associated tooling Work closely with the external SOC to investigate security alerts, manage incidents and implement remediation activities Configure and maintain identity and access management (IAM), RBAC, Conditional Access and endpoint security controls Develop automation and Infrastructure as Code (IaC) capabilities to improve security, consistency and operational efficiency Support the development and maintenance of security policies, procedures and compliance frameworks Contribute to ISO 27001, Cyber Essentials Plus and wider information security accreditation activities Identify security improvements, address vulnerabilities and support cloud and infrastructure transformation projects Skills & Experience

Proven experience in a hands-on IT Security, Cloud Security or Senior Infrastructure Security role Strong technical knowledge of Microsoft 365, Azure, Entra ID, Intune, Defender and Sentinel Experience managing vulnerability scanning, patch management and security controls, ideally using Qualys Good understanding of IAM, RBAC, Conditional Access and Microsoft cloud security best practices Experience with PowerShell, scripting, automation or Infrastructure as Code Previous experience working with a SOC, responding to security incidents and managing remediation activities Understanding of security frameworks including ISO 27001, Cyber Essentials Plus and NIST Relevant Microsoft or security certifications such as AZ-500, Security+, CISSP or CISM would be advantageous Salesforce security experience would be beneficial but is not essential