Security IT Support Engineer

We're looking for someone who knows IT support inside out and takes security seriously. You'll keep the environment running day to day - endpoints, access, patching, support - while also owning vulnerability management across our devices, servers, and virtual desktops.

AI is part of how we work now. That means you'll also help us make sure the AI tools our teams are adopting are being used safely. You don't need to be a researcher. You just need to understand the risks and be willing to engage with them.

Responsibilities

• IT support: Be the first line of support for the organisation. Resolve issues, hit SLAs, and keep things moving.
• Endpoint management: Own the full lifecycle of our devices - laptops, desktops, mobiles, and virtual desktops. Deployment, configuration, troubleshooting, all of it.
• Patch management: Keep endpoints, workstations, cloud servers, and VDI environments up to date. Track what needs patching, get it done, and report on it.
• Vulnerability management: Run regular vulnerability scans across our environment. Understand what the results mean, prioritise by risk, and drive remediation to closure.
• Access & identity: Manage user accounts and access rights. Enforce least privilege. Make provisioning and deprovisioning slick and secure.
• Threat prevention: Help implement and monitor our security controls - endpoint protection, DLP, email security, network controls. Keep an eye on what's happening.
• Asset management: Know what we have, where it is, and who has it. Keep the inventory accurate.
• Onboarding & offboarding: Set people up properly when they join and make sure access is cleanly revoked when they leave.
• AI enablement & security: Work with teams to help them adopt AI tools safely. Spot risks like prompt injection, data leakage, or insecure integrations. Help us keep track of what AI tools are in use and make sure we have the right guardrails in place.

Requirements

• 3+ years in an IT support or IT operations role
• Solid experience with identity and access management, MDM, and endpoint security tools
• Some exposure to patch management - even if it's mostly been laptops, that's fine. We care that you understand the concept and are willing to grow into the broader scope.
• You've come across vulnerability scanning before and have a basic idea of what the results mean. You don't need to be an expert - we just want to know it's not brand new to you.
• You understand what AI tools are doing when people use them at work, and you can think about the security angle
• Skilled at translating complex technical concepts into clear, accessible language for non-technical stakeholders
• Highly self-directed professional who anticipates needs and ensures project momentum without requiring external follow-up.

Nice-to-Haves

• IT or security certifications (CISSP, CompTIA Security+, AWS, Microsoft Certified, etc.)
• Experience with physical office IT setup - networking gear, workstations, cabling
• Basic scripting ability (Python, Bash, PowerShell) to automate the repetitive stuff
• Exposure to LLM security concepts - prompt injection, data leakage, agentic risks - even from your own reading or research
• Worked in a fast-paced or high-security environment before