Security Engineer

CV-Library

Security Engineer protecting CV-Library’s cloud-native platform and internal IT estate. Managing incidents, security tooling, vulnerabilities and compliance across UK and overseas operations.

Posted 9/11/2026full-timeFleet • 🇬🇧 United KingdomMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in managing security incidents, vulnerability management, and cloud security solutions, with a strong focus on compliance with ISO 27001 and UK GDPR principles. Proficient in utilizing security tools and frameworks to enhance organizational security posture and promote best practices across teams.

Highest-signal resume keywords

Incident ResponseVulnerability ManagementMicrosoft 365 SecurityCloud-Native InfrastructureISO 27001 Compliance

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Security ToolsPenetration TestingVulnerability Management ProcessesEndpoint Protection TechnologiesIdentity and Access ManagementSIEM MonitoringThreat IntelligenceCloud SecurityAWSKubernetes

Soft Skills

Excellent Communication Skills

Tools & Technologies

Microsoft DefenderIntuneConditional AccessSIEMCloud Security Solutions

Industry Keywords

ISO 27001UK GDPRData Protection PrinciplesSecurity Best Practices

Tech Stack

Tools & technologies

AWSCloudKubernetes

About the role

Key responsibilities & impact

Manage security alerts, investigations and incidents across CV-Library’s technology estate
Monitor emerging cyber threats and threat intelligence, assessing risks and recommending security-control improvements
Lead initial security incident response, coordinating containment and remediation with technical teams
Maintain incident records and conduct post-incident reviews
Improve security tooling, including SIEM, endpoint protection, vulnerability management and cloud security solutions
Own endpoint and Microsoft 365 security, including device security, conditional access and identity protection
Define cloud infrastructure and software-delivery security standards and guardrails with Platform DevOps teams
Manage identity and access-management processes, including provisioning, access reviews and least privilege
Provide security guidance on infrastructure, platform and application changes
Oversee vulnerability management and remediation
Coordinate external penetration testing and track remediation actions
Maintain security documentation, policies and audit evidence for ISO 27001 compliance
Apply GDPR and data-protection principles to security controls and documentation
Support supplier and third-party security assessments
Assess secure use of AI technologies and promote security best practices across technical and non-technical teams
Report directly to the Platform & Service Operations Manager

Requirements

What you’ll need

Strong technical knowledge of security tools, frameworks and best practice
Solid understanding of cloud-native infrastructure, including AWS and Kubernetes/EKS
Experience with penetration testing engagement and vulnerability management processes
Understanding of endpoint protection technologies and policy configuration
Experience with Microsoft 365 security tooling, including Defender, Intune and Conditional Access
Working knowledge of Identity and Access Management principles
Strong incident response and threat intelligence skills
Experience with SIEM-based monitoring and triage
Familiarity with ISO 27001 security accreditations and operational requirements
Working knowledge of UK GDPR and data protection principles
Excellent communication skills for technical and non-technical audiences

Benefits

Comp & perks

Hybrid working pattern: 3 days a week on site
Monday-Friday, 9:00-17:30 working hours
Opportunities for career growth
Diversity and inclusion commitment
Reasonable adjustments to assist with applications