IT Security Engineer

IT Security Engineer

Location: UK - Hybrid (Abingdon-based)

Reporting to: Head of IT Security

We're looking for an experienced IT Security Engineer to join our Security team. This is a hands-on role focused on protecting our systems, networks and data from evolving cyber threats while ensuring security best practices are embedded across the organisation.

You'll work closely with Infrastructure, Development, Support and Project teams to strengthen our security posture, support compliance initiatives and help drive continuous improvement across our information security management framework.

This is an excellent opportunity for a security professional who enjoys balancing operational security, compliance and technical problem-solving in a fast-paced, international environment.

What You’ll Do

• Monitor networks and systems for suspicious activity, responding to potential threats and security incidents.
• Configure, maintain and optimise firewalls, VPNs and other security technologies to protect critical business systems.
• Conduct security audits and assessments to support ISO 27001 compliance and broader security objectives.
• Manage vulnerability identification, risk assessment and remediation activities across the technology estate.
• Support incident response activities, investigations and post-incident reviews to strengthen organisational resilience.
• Collaborate with Infrastructure, Development and Support teams to ensure security is embedded into solutions and processes.
• Maintain security documentation, policies, procedures and technical standards.
• Oversee patch management activities to reduce exposure to known vulnerabilities.
• Support vendor and third-party security assurance activities, ensuring suppliers meet required security standards.
• Drive continuous improvement of the Information Security Management System (ISMS).
• Contribute to audit preparation and support both internal and external compliance reviews.
• Act as a trusted security advisor across the business, helping colleagues understand and manage security risks.

What You’ll Bring

• 3 to 5+ years' experience in IT Security or a similar cyber security role.
• Strong understanding of network security principles, including firewalls, VPNs, intrusion detection systems and SIEM technologies.
• Experience with vulnerability assessments, threat monitoring and security incident management.
• Knowledge of security frameworks and compliance standards such as ISO 27001, SOC 2 and PCI DSS.
• Understanding of threat modelling, risk management and security best practices.
• Experience working with cloud environments such as AWS, Azure or GCP.
• Strong knowledge of networking technologies, including TCP/IP, DNS, routing and switching.
• Experience using security tools such as Wireshark, Nmap, Snort or equivalent technologies.
• Excellent analytical, troubleshooting and problem-solving skills.
• Strong communication skills with the ability to engage both technical and non-technical stakeholders.
• Scripting and automation experience using tools such as Python or PowerShell would be advantageous.
• Experience with penetration testing or threat hunting would be beneficial.
• Relevant certifications such as CISSP, CEH, CCNA Security or ISO 27001 Lead Auditor are highly desirable.

Why Join Us?

• Be part of a global business making a meaningful impact on sustainability, ESG and responsible business practices.
• Work with a collaborative and supportive technology team where security is a strategic priority.
• Gain exposure to a diverse technology environment spanning infrastructure, cloud platforms and global operations.
• Play a key role in strengthening Achilles' cyber security capabilities and compliance maturity.
• Influence security decisions and contribute to organisation-wide improvements.
• Enjoy hybrid working, career development opportunities and ongoing investment in professional growth.
• Be part of a business that values innovation, collaboration and continuous improvement.

We welcome applications from armed forces veterans, reservists and their families. We are committed to equity, diversity and inclusion in our practices and workforce.A full role profile is available at Careers at Achilles | Join the Team

For more than 30 years, Achilles has protected organisations’ business interests and reputations by providing unrivalled levels of supply chain transparency, carbon reduction and management. We are the ESG and carbon management partner of choice for the world’s leading global brands.

Achilles specialises in supporting customers that require truly robust environmental, social and governance reporting to fully comply with ESG regulation, meet investor requirements, and achieve their own ambitious sustainability goals. We work with market-leading financial, industrial, commercial, and governmental organisations requiring the serious, detailed analysis and expert insight necessary to deliver exceptional reporting confidence.

Operating from 22 locations worldwide, Achilles is at the forefront of the battle against climate change, a champion for social justice and human rights, and an expert in health, safety, and risk management.

The Achilles Way – how we do things

Be Curious – Ask questions, understand why, challenge and grow

Commit – Show passion, create value, deliver simple solutions, be a leader

Collaborate – Think inclusive, show respect, be helpful, give thanks