Security Engineer

hackajob is collaborating with Envitia to connect them with exceptional tech professionals for this role.

Join a leading UK data and software company shaping the future of geospatial and security innovation.

Envitia is a UK-based software and services company that helps organisations unlock the full value of their data to make better, faster decisions. With over 30 years of experience, we specialise in delivering innovative software products, solutions, and consultancy services that transform complex data challenges into actionable insights.

Our mission is to empower customers across defence, government, and national security sectors to harness the power of data — from geospatial intelligence to advanced analytics and AI integration. We are proud to be a trusted partner to UK defence and government organisations, delivering technology that drives smarter, data‑driven outcomes.

We’re also delighted to have been named one of The Sunday Times Top 100 Medium‑Sized Companies to Work For 2025 — a recognition of our commitment to innovation, collaboration, and creating an outstanding workplace where people can thrive.

Envitia is recruiting a Security Engineer to join our growing Engineering department, initially working on our largest defence programme.

As part of the hosting engineering team, the successful candidate will specialise in the design, enhancement, and implementation of technical security controls across multi‑tenant cloud hosting platforms that underpin our defence clients’ digital strategies.

The role combines the delivery of new security features with the ongoing operation and support of live services. You will also work closely with new tenants to securely transition their applications onto the hosting environment. The platform is already operational, fully approved for use, and deployed across multiple security domains.

This is a hands‑on security engineering role and is not focused on security accreditation or assurance activities. Instead, you will be responsible for specifying, configuring, implementing, and testing technical security measures that protect and strengthen the hosting platform.

• Provide security engineering services as a member of the overall platform engineering service team
• Secure all cloud infrastructure from both a deployment and detection standpoint.
• Coordinate and advise other team members on security approaches and industry best practices
• Coordinate with MOD Security Authorities on risks and appropriate technical control options
• Design, implement, manage and continually improve service‑wide cloud security controls using the inherent / new security products and features provided on the existing hosting platforms
• Architect and enforce Zero Trust and least‑privilege models (RBAC, PBAC), restrictions, and platform security controls
• Monitor security control effectiveness and drive continuous improvement of cloud hosting security governance
• Ensure all technical security measures from the boundary to the tenant applications are optimal and exceed the MOD specified minimum base security requirements

• Experience with on‑premise Security Information and Event Management (SIEM) systems (e.g., Vmware Aria Operations, Fortinet, Splunk).
• Ability to enhance, operate, and manage SIEM services for multi‑tenant cloud platforms.
• Skills in event triage, escalation, and incident investigation, including collaboration with tenants and central SOC teams.
• Familiarity with real‑time threat detection, monitoring, and alerting across network, boundary, hosting, and application layers.

• Hands‑on experience with VMware Cloud Foundation (Incl. Aria operations and NSX‑T) and related technologies in air‑gapped or restricted environments.
• Security best practices, system and OS level security hardening (CISCAT, NIST benchmarking etc) security vulnerability scanning tools such as Nessus
• Experience with infrastructure as code (IaC) tools (e.g., Terraform, Ansible, Packer) and containerization (e.g., Kubernetes, Tanzu).
• In‑house security assessment and testing…