IT Infrastructure and Security Engineer

#TEAMBULK ARE HIRING AN IT INFRASTRUCTURE AND SECURITY ENGINEER

At Bulk ™, we believe the gym changes everything. It makes you feel stronger, fitter and healthier. For 20 years, we’ve been developing elite sports nutrition products for every type of training. Trusted by Olympic athletes and everyday gym-goers, we help you power through training, push your limits, and achieve more.

Join us, and be part of what's next.

IN A NUTSHELL

As the IT Infrastructure and Security Engineer, you’ll oversee Bulk’s IT infrastructure and security posture, creating a resilient technical foundation while supporting AI adoption across the business. This role blends hands‑on infrastructure management and cyber defence with strategic improvements, threat management, and compliance. You’ll also partner with senior leadership to optimise key toolsets that drive Bulk’s ongoing growth.

WHAT WILL YOU BE DOING?

Infrastructure

• Oversee the planning, design, implementation, monitoring, and maintenance of Bulk’s IT infrastructure, including on‑premise and cloud‑based systems (Google Workspace, Azure, network, firewall, VPN, etc).
• Ensure system reliability, resilience, performance, and secure configuration, and updates, adhering to industry best practices.
• Lead infrastructure projects, from capacity planning to deployment, to support evolving business requirements.
• Support 2nd and 3rd line issues, guiding troubleshooting and resolution in line with SLAs
• Create and maintain technical documentation, policies, and procedures, ensuring smooth handover to Service Desk teams.
• Lead the incident response lifecycle, including managing security incidents and data breach containment, eradication, and post‑mortem analysis.
• Serve as a dedicated Tier 3 escalation point for the Helpdesk team, providing expert advanced technical support and resolution for complex incidents.

AI Tooling & Enablement

• Own the setup, configuration, and maintenance of AI tooling across the business (e.g., Claude Code, Cowork, Codex‑style coding/agent tools), including integrations, MCP server configuration, and connector management.
• Manage user access, permissions, and governance for AI tools, ensuring least‑privilege access and secure connector/integration setup.
• Partner with teams to onboard new AI tools and integrations, balancing productivity gains with security and compliance requirements.

Cybersecurity

• Develop and implement security measures to protect Bulk’s IT environment, continuously enhancing the security framework.
• Monitor, investigate, and remediate security alerts, incidents, and Indicators of Compromise (IOCs).
• Conduct threat analysis to address new and emerging risks; deploy response strategies to mitigate vulnerabilities.
• Manage and optimise security tools, including Next‑Gen SIEM, SOAR, EDR/MDR/XDR, and cloud security solutions (CASB, ZTNA, SASE).
• Lead cybersecurity audits, compliance initiatives, and certification efforts (Cyber Essentials, ISO 27001).
• Perform regular vendor security assessments and coordinate with stakeholders on secure technology solutions.
• Perform regular vendor security assessments and coordinate with stakeholders on secure technology solutions.

WHAT ARE WE LOOKING FOR?

• Bachelor’s degree in Cybersecurity, IT, or a related field; relevant certifications (e.g., CISSP, CISM, CompTIA, ITIL).
• 3+ years’ experience in infrastructure and security management within a medium‑sized enterprise.
• Proficient in networking, cloud, and endpoint security technologies, including CrowdStrike, Cisco, Azure, VSphere, Windows Server, Mac/Windows, Jamf/Intune MDMs Automox, and VPNs.
• Hands‑on experience with infrastructure management, cloud solutions (Azure, Google Workspace), and security frameworks.
• Strong knowledge of security monitoring, incident response, and threat analysis, including managing IOCs and remediation.
• Experience with compliance standards (e.g., Cyber Essentials, ISO 27001) and conducting vendor security assessments.
• Experience setting up and administering AI coding/agent tools (e.g., Claude Code, GitHub Copilot, Codex) and their integrations, including MCP servers, connector permissions, and access management.
• ITIL and project management certifications (e.g., Prince2).
• Advanced knowledge of infrastructure best practices and proactive problem‑solving skills.
• Experience working with Netskope.
• Familiarity with emerging AI infrastructure patterns (agentic tools, MCP, connector‑based integrations) and associated access control best practices.
• Excellent communication and team leadership abilities.
• Hands‑on experience with Netskope CASB/SSE, including SSL/TLS inspection, DLP, Zero Trust architecture, CASB policy design, and SCIM‑based provisioning to support enterprise cloud security.

WHAT ARE THE GAINS?

• Monthly Bulk Bank Benefits Allowance including a subsidised Gym Membership
• A day off to celebrate your Birthday
• 60% discount on all Bulk™ products
• Additional Annual Leave (optional)
• Life Assurance
• A day off for Volunteering (optional)
• Enhanced Maternity & Paternity leave and workplace nursery scheme
• Summer Working Hours

LOCATION: Colchester, UK

HYBRID: 3 days in the office, 2 days working from home

Bulk ™ is a place where employees have a voice fundamental to our success as a business. Building a diverse and inclusive team enables us to reach and connect with our global customers, from developing delicious recipes to how our brand is built and perceived.

Regardless of age, disability, race, gender, religion, sexual orientation, education, neurodiversity or any protected characteristic, if you are a passionate risk‑taker and eager to make a difference in sports nutrition, we want to hear from you. We know that a CV doesn’t begin to scratch the surface, and that the things that make you who you are could be a real game‑changer for us. We are proud to be an equal opportunities employer.

#J-18808-Ljbffr