{"id":2615694,"url":"https://alion.io/job/penningtonslaw-it-security-engineer","title":"IT Security Engineer","company":{"id":1861929,"name":"Penningtonslaw","domain":"penningtonslaw.com","url":"https://alion.io/company/penningtonslaw","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"iCIMS","truth_index":null},"role":"Security","role_family":"Security","seniority":"junior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Basingstoke, United Kingdom"],"countries":["GB"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":44000,"max_usd":85000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":8},"experience_years_min":2,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"ISO 27001","optional":false},{"name":"Least Privilege","optional":false},{"name":"Microsoft Defender for Cloud","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"SIEM","optional":false},{"name":"SLI/SLO/SLA","optional":false},{"name":"Azure","optional":true},{"name":"IAM","optional":true},{"name":"Microsoft Sentinel","optional":true},{"name":"NIST CSF","optional":true},{"name":"Splunk","optional":true}],"status":"live","first_seen_at":"2026-10-15T12:11:10Z","employer_posted_date":"2026-10-15","last_verified_at":"2026-10-15T23:14:37Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"Overview\nThe Security Engineer is a core member of the Security team, responsible for protecting the organisation's technology environment through proactive security monitoring, incident response, vulnerability management, and identity & access governance. They share responsibility across all security domains, operate a named on-call rota as the primary interface to the external SOC, and provide mutual peer backup. Each Security Engineer also owns formal responsibility for Vulnerability & Compliance and Identity & Access Management as defined disciplines.\nResponsibilities\nSecurity Operations\nMonitor the SIEM platform and security tooling daily - triaging alerts, investigating anomalies, and escalating confirmed threats.\nAct as the named internal interface to the external SOC - receiving escalations via the on-call rota, making incident response decisions, and providing the SOC with updated detection requirements.\nLead incident response for confirmed security events - coordinating containment, remediation, and recovery.\nOwn and manage Defender for Endpoint / XDR and Defender for Cloud Apps - maintaining configuration, reviewing alerts, and tuning detection policies.\nManage SIEM rule sets - adding new detection use cases, tuning existing rules, and reviewing rule coverage.\nVulnerability & Compliance\nOwn and operate the vulnerability management programme - running regular scanning, triaging findings, and tracking remediation to SLA.\nManage patching governance oversight - ensuring the organisation's patch management process is followed and exceptions are documented.\nMaintain alignment with compliance frameworks - Cyber Essentials, ISO 27001, or equivalent.\nOwn Purview Compliance - maintaining audit log policies, eDiscovery configuration, and retention policies.\nIdentity & Access Management\nOwn the organisation's Identity & Access Management discipline - including Entra ID, Privileged Identity Management (PIM), and access governance.\nMonitor the joiner/mover/leaver (JML) process - ensuring accounts are provisioned, modified, and deprovisioned accurately and on time.\nRun and manage access reviews and access certification cycles - enforcing least privilege.\nManage privileged accounts - ensuring all privileged access is logged, reviewed, and time-bound where possible.\nAI & Technology Governance (Security Input)\nReview new AI tool requests from a security risk perspective - assessing data handling, access scoping, and prompt injection risk.\nEnsure AI tools approved for use are correctly scoped and monitored; feed AI-related security findings into the risk register.\nAt our firm, Diversity, Equity and Inclusion is a priority and at the heart of everything we do. We actively want to attract a diverse workforce and welcome applications from everyone, from all backgrounds. We are committed to promoting an inclusive culture where everyone can be their full selves and experience being seen and heard. You can find out more about our firm’s commitment, initiatives and Pennclusion committees here.\nWe ensure that there are equal opportunities and treatment for all job applicants and employees, at all stages of the recruitment process and employment, regardless of age, gender reassignment, marriage or civil partnership, pregnancy and maternity, disability, race (including colour, nationality, ethnic or national origin), religion or belief, sex, sexual orientation, gender identity, gender expression and social background. We aim to provide adjustments for people who have a disability, long-term health condition (including mental health) or neurodiversity. If you would like to request an adjustment, please contact \nEssential & Desirable Criteria\nEssential:\nHands-on experience with SIEM platforms - alert triage, rule management, and investigation (Microsoft Sentinel, Splunk, or equivalent)\nPractical experience with Defender products - Defender for Endpoint, Defender for Cloud Apps, Defender for Identity\nVulnerability management experience - scanning, triage, and remediation tracking\nIdentity & access management knowledge - Entra ID / Azure AD, conditional access, PIM, access reviews\nIncident response experience - containment, investigation, and remediation in a real-world environment\nMinimum 2-3 years in a security operations or cyber security role\nExperience responding to real security incidents\nExperience with vulnerability management in an enterprise environment\nTrack record of working with IAM systems in a governance or operational capacity\nVigilant and detail-oriented - security threats are often subtle and require sustained attention\nCalm and structured under pressure - able to follow an incident response process during a live security event\nCollaborative with the Cloud Platform Specialist - understands that security and platform administration are interdependent\nCommunicates security risk clearly - translates technical findings into risk language the business can understand\nTakes ownership - does not wait to be told to act when a threat is identified\nDesirable:\nSecurity certifications: SC-200, CompTIA Security+, CySA+, CEH, or equivalent\nExperience with Purview Compliance workloads (eDiscovery, audit logs, retention)\nFamiliarity with ISO 27001, Cyber Essentials Plus, or NIST CSF\nExperience working with or managing an external SOC relationship\nExperience in a peer-model security team or SOC environment\nExposure to a regulated industry with compliance requirements\nInterest in emerging threats and staying current with the security landscape","description_format":"text","description_chars":5553,"description_truncated":false,"requirements":{"experience_years_min":2,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Equity"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":[],"lifecycle":[{"event":"open","at":"2026-10-15T12:11:10Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":17,"reasons":["conf:1","win:early","comp:junior"],"computed_at":"2026-10-16T00:52:59Z"},"pay":null,"html_url":"https://alion.io/job/penningtonslaw-it-security-engineer","json_url":"https://alion.io/job/penningtonslaw-it-security-engineer.json","meta":{"generated_at":"2026-10-16T00:52:59Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":1437,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-17T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1861929},"rest":"https://alion.io/mcp/rest/get_company?id=1861929"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fpenningtonslaw-it-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fpenningtonslaw-it-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fpenningtonslaw-it-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/penningtonslaw-it-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fpenningtonslaw-it-security-engineer"}]}