IT Infrastructure and Security Engineer

#TEAMBULK ARE HIRING AN IT INFRASTRUCTURE AND SECURITY ENGINEER

Bulk™ is on an incredible journey, with a mission to move the business from a manufacturing-led retailer to a destination brand for active nutrition. We are shaking up the sports nutrition industry through disruptive marketing campaigns that help people think differently about our brand - and we want you to be a part of it!

We want passionate risk-takers. We want people that like to challenge our thinking. We want people that live and breathe digital and have an affinity to the world of nutrition, health, fitness, and sports.

IN A NUTSHELL

As the IT Infrastructure and Security Engineer, you'll oversee Bulk's IT infrastructure and security posture, creating a resilient technical foundation while supporting AI adoption across the business. This role blends hands-on infrastructure management and cyber defence with strategic improvements, threat management, and compliance. You'll also partner with senior leadership to optimise key toolsets that drive Bulk's ongoing growth.

WHAT WILL YOU BE DOING?

Infrastructure

• Oversee the planning, design, implementation, monitoring, and maintenance of Bulk's IT infrastructure, including on-premise and cloud-based systems (Google Workspace, Azure, network, firewall, VPN, etc).
• Ensure system reliability, resilience, performance, and secure configuration, and updates, adhering to industry best practices.
• Lead infrastructure projects, from capacity planning to deployment, to support evolving business requirements.
• Support 2nd and 3rd line issues, guiding troubleshooting and resolution in line with SLAs
• Create and maintain technical documentation, policies, and procedures, ensuring smooth handover to Service Desk teams.
• Lead the incident response lifecycle, including managing security incidents and data breach containment, eradication, and post-mortem analysis.
• Serve as a dedicated Tier 3 escalation point for the Helpdesk team, providing expert advanced technical support and resolution for complex incidents.

AI Tooling & Enablement

• Own the setup, configuration, and maintenance of AI tooling across the business (e.g., Claude Code, Cowork, Codex-style coding/agent tools), including integrations, MCP server configuration, and connector management.
• Manage user access, permissions, and governance for AI tools, ensuring least-privilege access and secure connector/integration setup.
• Partner with teams to onboard new AI tools and integrations, balancing productivity gains with security and compliance requirements.

Cybersecurity

• Develop and implement security measures to protect Bulk's IT environment, continuously enhancing the security framework.
• Monitor, investigate, and remediate security alerts, incidents, and Indicators of Compromise (IOCs).
• Conduct threat analysis to address new and emerging risks; deploy response strategies to mitigate vulnerabilities.
• Manage and optimise security tools, including Next-Gen SIEM, SOAR, EDR/MDR/XDR, and cloud security solutions (CASB, ZTNA, SASE).
• Lead cybersecurity audits, compliance initiatives, and certification efforts (Cyber Essentials, ISO 27001).
• Perform regular vendor security assessments and coordinate with stakeholders on secure technology solutions.
• Perform regular vendor security assessments and coordinate with stakeholders on secure technology solutions.

WHAT ARE WE LOOKING FOR?

• Bachelor's degree in Cybersecurity, IT, or a related field; relevant certifications (e.g., CISSP, CISM, CompTIA, ITIL).
• 3+ years' experience in infrastructure and security management within a medium-sized enterprise.
• Proficient in networking, cloud, and endpoint security technologies, including CrowdStrike, Cisco, Azure, VSphere, Windows Server, Mac/Windows, Jamf/Intune MDMs Automox, and VPNs.
• Hands-on experience with infrastructure management, cloud solutions (Azure, Google Workspace), and security frameworks.
• Strong knowledge of security monitoring, incident response, and threat analysis, including managing IOCs and remediation.
• Experience with compliance standards (e.g., Cyber Essentials, ISO 27001) and conducting vendor security assessments.
• Experience setting up and administering AI coding/agent tools (e.g., Claude Code, GitHub Copilot, Codex) and their integrations, including MCP servers, connector permissions, and access management.

Desirable Skills

• ITIL and project management certifications (e.g., Prince2).
• Advanced knowledge of infrastructure best practices and proactive problem-solving skills.
• Experience working with Netskope.
• Familiarity with emerging AI infrastructure patterns (agentic tools, MCP, connector-based integrations) and associated access control best practices.
• Excellent communication and team leadership abilities.
• Hands-on experience with Netskope CASB/SSE, including SSL/TLS inspection, DLP, Zero Trust architecture, CASB policy design, and SCIM-based provisioning to support enterprise cloud security.

WHAT ARE THE GAINS?

• Monthly Bulk Bank Benefits Allowance including a subsidised Gym Membership
• A day off to celebrate your Birthday
• PerkBox Subscription
• 60% discount on all Bulk™ products
• Flexi Start
• Additional Annual Leave (optional)
• Teammate Pension Scheme
• Life Assurance
• Medicash
• A day off for Volunteering (optional)
• Cycle to Work Scheme
• Enhanced Maternity & Paternity leave and workplace nursery scheme
• Bulk™ Pantry
• Happy Hour Drinks Fridge (Thursdays & Fridays)
• Summer Working Hours

LOCATION: Colchester, UK

HYBRID: 3 days in the office, 2 days working from home

OUR COMMITMENT

Bulk™ is a place where employees have a voice fundamental to our success as a business. Building a diverse and inclusive team enables us to reach and connect with our global customers, from developing delicious recipes to how our brand is built and perceived.

Regardless of age, disability, race, gender, religion, sexual orientation, education, neurodiversity or any protected characteristic, if you are a passionate risk-taker and eager to make a difference in sports nutrition, we want to hear from you. We know that a CV doesn't begin to scratch the surface, and that the things that make you who you are could be a real game‑changer for us. We are proud to be an equal opportunities employer.

PRIVACY

Bulk™ takes your privacy seriously and will only use your personal information to administer your application for this role. When you apply, we shall process your details for this vacancy only and we will not pass your details onto a third party. We may contact you by email, text or telephone about the progress of your application. This processing is conducted lawfully on the basis of legitimate interests.

#J-18808-Ljbffr