Cyber Security Engineer

The Woodland Trust is looking for a Cyber Security Engineer to act as the security lead on all cloud infrastructure and help develop, and implement, a leading cyber security programme to protect against cyber threats to the organisation.

The Role:

• Support delivery of the Cyber Security Strategy, focusing on threat detection, prevention, and analysis.
• Contribute to technology governance, including developing and managing security policies and procedures.
• Analyse complex technical challenges and implement effective cyber security improvements aligned to organisational needs.
• Collaborate with development teams to embed and manage application security tooling across DevOps processes.
• Lead cloud security risk remediation and provide secure design for new systems, upgrades, and migrations.
• Design, configure, and manage vulnerability management solutions, including remediation from testing and scanning activities.
• Maintain secure and compliant cloud infrastructure, supporting implementation, upgrades, troubleshooting, and evaluation of new security technologies.
• Act as SME for security incidents and technical risk management, while developing documentation, architecture artefacts, and disaster recovery plans.
• This is a hybrid position with a mix of home working, and from our head office in Grantham, Lincolnshire. Head office attendance would be required no more than once a month on average.

The Candidate:

• Strong experience in Endpoint Security Management and Compliance using Microsoft Intune (antivirus, disk encryption, firewall, ASR, account protection).
• Design, deployment and maintenance of enterprise security technologies across complex environments (EDR, SIEM, patch management, penetration testing tools).
• Extensive hands-on expertise with Microsoft security solutions including Defender suite, data classification and data loss prevention.
• Proven ability to align security architecture with regulatory and compliance frameworks (ISO27001, PCI DSS, GDPR, Cyber Essentials) using a risk-based approach.
• Cloud security and identity design experience (Azure AD/Entra ID, Azure ADDS, Enterprise Applications, PIM, Conditional Access, IAM).
• Security posture management, monitoring and remediation using Microsoft Secure Score and Microsoft 365 Defender.
• Design and implementation of secure-by-design cloud-native and distributed architectures, including governance (Azure Policy, Management Groups), Office 365 security, encryption standards, and knowledge of MITRE ATT&CK framework.
• Microsoft Certified: Azure Security Engineer Associate (Essential) and Cyber Security Architect Expert. With security Certifications such as CISM, CISSP, SANS, CEH, CREST.

Benefits and Wellbeing:
Joining our team means you’ll be a big part of tackling environmental and climate issues. We take good care of our staff, offering support and training opportunities. We also offer:

• Enhanced Employer Pension
• Life Assurance
• Flexible & Hybrid Working Options
• Generous Annual Leave - 25 Days Plus Bank Holidays (pro rata’d for part-time)
• Buy and Sell Holiday Scheme
• Enhanced Parental Pay
• Employee Assistance Programme

About Us:
The Woodland Trust is the UK’s leading woodland conservation charity.  We want to see a world where trees and woods thrive for people and nature. The Trust engages and inspires people to make their difference tackling the nature and climate crisis helping protect, restore and create our vital woods and trees.

Our Commitment to Diversity and Inclusion:
To achieve our vision of a world where woods and trees thrive for people and nature, we need to better reflect society and the communities we work in. All people, no matter their background, identity, ability, or circumstance, should benefit from trees.  
People of colour and disabled people are currently under-represented across the environment and conservation sector. If you identify as a person of colour and/or disabled, we particularly encourage you to apply. 
Please contact us to discuss any additional support or adjustments you may need to complete your application.

Application Advice:
For fairness we keep our candidates’ personal details hidden from the hiring managers, we do not ask for your CV at application stage OR so they do not see your CV until shortlisting is completed. Make sure that your Personal Statement clearly shows how your skills and knowledge link to the specifications in the job description and you share with us your passion for the role.   

Acceptable Use - Artificial Intelligence (AI):
We understand that candidates may choose to use AI tools to support their job applications-for example, to help structure or edit written responses. We welcome the use of AI in this way, particularly where it helps improve accessibility, such as for neurodivergent applicants. However, we ask that any information submitted reflects your own experience, skills and understanding. During interviews, candidates are expected to respond independently without the use of AI tools.

Apply Now:
If you're ready to make a difference and grow with us, send in your application today. We might close the job opening early if we get a lot of applications, so it's a good idea to apply soon. If we do close the advert early, and you have an application in process, we will email you prior to closing to give you time to complete.

Interviews will be held via Microsoft Teams week commencing 13th April.