Senior IT Security Engineer - Holland & Barrett International Limited : Job Details

About the Role:

Holland & Barrett is one of the world's leading health and wellness retailers, with over 150 years of expertise in providing customers with high-quality vitamins, supplements, and natural beauty products. With a strong presence across the UK and beyond, we are on a mission to make health and wellness a way of life for everyone. As we continue to innovate and expand, our technology team plays a crucial role in ensuring the security and resilience of our systems. Join us to be part of a dynamic and forward-thinking environment where you can make a real impact in shaping our IT security landscape.

As an IT Security Engineer, you'll play a key role in strengthening our endpoint security—from our distribution centers to our stores. You'll collaborate with multiple teams to align with our security strategy, deliver standards and guidance, and identify opportunities to enhance our security posture.

In this role, you'll work closely with engineering teams to pinpoint security gaps and develop clear action plans to close them. You'll also drive automation and push towards a secure-by-default environment. Staying ahead of the latest security trends and early warning indicators, you'll help design solutions to counter emerging threats.

Beyond problem-solving, you'll be a trusted expert, sharing your knowledge and insights with engineering teams and other stakeholders across the business.

Responsibilities 

• Provide subject matter expertise and best practices regarding:
• Security for Azure cloud solutions
• Windows security for workstations and servers
• Data security and sharing
• Security of Work From Home scenarios
• Identity and access control for both on-prem and Azure including technologies such as Azure Entra / Active Directory / MFA / PIM / Security Group Management / Group Policy / Intune Policy
• Remediation of unapproved software
• Logging and auditing for security events
• Communicate complex and technical issues to diverse audiences, orally and in-writing, in an easily understood, informative, and actionable manner.
• Rapidly react to changing situations and develop new plans based on recent discoveries.
• Evaluate capabilities and features to identify gaps against our security standards and drive security gap resolution.
• Analyze and improve situational awareness and incident response capabilities.
• Ensure update compliance for Windows and Linux systems (both on-prem and cloud).
• Engage in broader security related efforts. Own and implement security baselines in Microsoft Security Tools such as Microsoft Azure, Entra, Intune, Defender, etc.

Key Requirements:

Qualifications:

• 5+ years of experience in any of the following large-scale computing, cyber security, anomaly detection, Security Operations Center (SOC) detection, threat analytics, security incident and event management (SIEM), information technology (IT), and operations incident response
• CISSP, CISA, CISM, SANS, GCIA, GCIH, OSCP, Security+, and/or other security certifications.
• Experience with supporting cloud-based security solutions at an enterprise level.

Additional or Preferred Qualifications:

• Experience working with encryption, remote access technologies, authorization, PKI, modern authentication and cloud app authorization architectures, and security protocols such as SAML and OAUTH. Experience with Linux, network, and other appliance security best practices.
• Experience with working collaboratively with engineering teams to drive architectural changes that improve the stability and security of each environment.
• Demonstrated success in dealing with ambiguity and problem definition under timeline constraints.
• Experience planning, researching, and developing security policies, standards, and procedures.
• Experience with configuring, administrating and troubleshooting Windows Workstation and Server platforms.

What we offer:

• Pension company contribution = 3%
• Incentive scheme up to 10% of annual salary, based on company performance.
• Your wellbeing is paramount so you can get away and take 33 Days Holiday per year.
• Private Medical Care (Self after 1 year)
• Learning and Development opportunity with Holland & Barrett is a great base for career development long term.
• Career progression.
• Refer and Earn Scheme - as we're growing you can earn money by referring people to join us from your network.
• Epic Extras gives you access to exclusive benefits, free advice and savings from a range of retailers and providers.
• Stay healthy with Discounted Products - from day one you'll get a 25% discount (on top of other promotions) when you shop at H&B on anything that you buy.
• We all need a little help sometimes, so weoffer Free 24/7 Confidential Advice & Colleague Welfare.
• Mental Health First Aiders - we have lots of qualified Mental Health First Aiders because its all about your health & wellbeing.
• Stay active in the Onsite Gym at our Nuneaton Hub!
• We have colleague Reward and Recognition Schemes, so your hard work and loyalty won't go unnoticed.
• And many more!

We're passionate about helping every colleague thrive across all dimensions of wellbeing, and we're committed to having a diverse and inclusive workplace. In line with our EPIC values (Expertise, Pioneering, Inclusive, Caring), we embrace and actively celebrate all our colleagues' unique and varying experiences, backgrounds, identities and cultures - I am me, we are H&B. 

Holland & Barrett does not accept unsolicited resumes from search firms/recruiters. Please do not forward resumes to our job alias, employees, or any other company location. Holland & Barrett is not and will not be responsible for any fees if a candidate submitted by a search firm/recruiter unless otherwise agreed with respect to specific open position(s).