Systems & Security Engineer

Do you enjoy taking ownership of IT systems and security – not just maintaining what is already in place, but building the policies, controls and practices that make an organisation more secure? As Thunderstrike grows, we are strengthening our IT and security capabilities. We are looking for a Systems & Security Engineer who can help protect our Microsoft cloud environment and establish the security foundations needed to support our continued growth. This is a new role with significant influence and responsibility. You will combine hands-on systems administration with security engineering and compliance leadership, working closely with the IT Manager and colleagues across the organisation. Much of the structure is still being built, giving you the opportunity to shape how we approach security, compliance and operational resilience. Key Responsibilities Systems Engineering & Identity Management

• Maintain and strengthen our IT systems and identity management environment, including access management, user identities and security controls.
• Establish and continuously improve system configurations, access policies, endpoint management and device compliance, using technologies such as Entra ID, Conditional Access, MFA and Intune.

Security Engineering & Incident Response

• Implement and improve technical security controls across our IT environment, including Microsoft security and cloud technologies such as Defender, Defender for Cloud, Azure, Sentinel and Purview.
• Monitor security alerts, investigate incidents, identify root causes and coordinate containment, remediation and recovery.
• Translate findings into corrective actions and practical improvements that strengthen our overall security posture.

Compliance & Continuous Improvement

• Lead Thunderstrike's journey towards ISO/IEC 27001 certification and NIS2 compliance.
• Develop and maintain security policies, standards, documentation and procedures.
• Identify opportunities to improve security maturity, strengthen technical controls, automate processes and enhance operational resilience.

What You Need from Day One

• A relevant technical foundation, for example in Computer Science, Software Engineering, Computer Engineering or Applied Computer Science – or a comparable educational or professional background.
• Practical experience with IT systems administration and security, including an understanding of identity and access management, endpoint security and cloud environments.
• Experience investigating security incidents, troubleshooting complex technical issues and implementing effective solutions.
• A relevant security certification, such as CompTIA Security+ or equivalent, supported by practical experience.

You do not need to be the deepest specialist in every technology or security domain. You do need a solid understanding of how IT systems and security controls interact, the ability to investigate problems systematically and the initiative to turn security requirements into practical solutions. Whether your background is broader IT systems administration with a strong security focus or more specialised Microsoft engineering, we are interested in hearing from you. Developing Your Expertise You will develop an in-depth understanding of Thunderstrike's Microsoft cloud environment, including our specific security baselines, configurations and internal processes. You will also gain experience shaping our approach to security governance and compliance as we work towards ISO/IEC 27001 certification and NIS2 compliance. Working closely with IT, Quality and Security, you will have the opportunity to develop your expertise while building solutions that work in practice. Nice to Have – Not Required Additional certifications such as Microsoft Certified: Cybersecurity Architect Expert, CEH or CISM are advantageous. How We Work We own the outcome – You take responsibility for the security posture end to end. When a control or decision turns out to be wrong, you acknowledge it, investigate and fix it rather than defend it. We challenge early, then commit – You raise questions about security requirements and certification scope while they can still change. Once decisions are agreed, you take ownership and follow through. Why Join Thunderstrike?

• Take ownership of a new and important area of Thunderstrike's development.
• Have a direct influence on how security policies, systems and processes are established.
• Work with complex Microsoft technologies and real security challenges.
• Help build the foundations for a more secure and resilient organisation.

How to Apply If you recognise yourself in most of this, but not all of it, we would still like to hear from you. Tell us about the security challenges you have investigated and resolved, how you approached the technical work, and what you learned from something that did not go as planned. We are interested in how you think, how you solve problems and what you can bring to the role – not just a list of certifications and previous job titles. Successful completion of the required security clearance process is a mandatory final step in the recruitment process. Please mention in your application that you have seen the job on TechJob.