Cyber Security Engineer

Business Unit:  Technology Operations & Cyber Security (TOCS), COO
Salary range: £40,800 to £51,000 per annum DOE
Location:  Hybrid with occasional travel to a UK Virgin Money Hub location when required
Contract type: Permanent – Full Time

Our Team

The Security Engineering team is part of Technical Operations and Cyber Security within Virgin Money and we maintain the Bank’s Security tools & applications. Our aim of Security Engineering is to cultivate unwavering trust in our products and services by engineering resilient security solutions that protect our users and customers from evolving threats. We strive to be the invisible shield, working tirelessly to ensure their data and digital experiences remain safe, secure, and uninterrupted. By joining our team, you will become a vital part of this mission, contributing your unique skills and perspectives to building a safer digital future.

What you’ll be doing

• Proactively use security engineering tools to identify and mitigate security risks based on an in-depth understanding of network protocols, endpoint security and vulnerabilities.
• Develop and implement security measures using specialised tools based on Cyber security best practices.
• Working alongside project teams and other stakeholders to ensure solutions meet the strategic needs of Virgin Money.
• Helping to design, roll out and manage Microsoft Security technologies, with a particular focus on Defender for Endpoint, Defender for Servers and Purview products.
• Support and build endpoint & server security capabilities, including deciding on the granularities of controls from a threat-led perspective (e.g., application level, environment level, network level, network policies, mapping attack paths, and building mitigations).
• Contribute significantly to team culture and the ongoing evolution of security engineering practices.
• Implement automation to remove repetitive manual tasks.

We need you to have

• Hands-on experience with Microsoft Security technologies. For example, Defender for Endpoint, Defender for Servers and Defender XDR, Purview, including deployment, policy configuration, and incident response workflows.
• Familiarity with deploying Infrastructure as Code and using CI/CD technologies, such as Azure DevOps.
• Hands-on experience implementing Microsoft Defender for Endpoint and Defender for Servers in cloud and hybrid environments.
• Hands-on experience implementing and managing Microsoft Purview & DLP technologies.
• Previous experience working with security best practices – e.g. Zero trust, defence in depth, least privilege, security hardening, network security and compliance.
• Experience in applying zero-trust principles to secure large-scale IT infrastructures, demonstrated by successful deployments within a corporate setting.

It’s a bonus if you have but not essential

• Experience as a Cyber Security Engineer, Cyber Security Analyst with an interest in becoming a Cyber Security Engineer.
• Experience with Terraform, Python, Javascript/Node.js, PowerShell or Bash
• Knowledge of infrastructure and application monitoring, such as Icinga, Elastic Stack or Dynatrace.
• Endpoint Security certifications (especially Microsoft centric) would be advantageous.
• Proven ability to design and deploy endpoint/server security & compliance solutions.

Red Hot Rewards 

• 25 days holiday per year, increasing over time to 30. Plus, an option to buy more, giving you even more choice.
• Private medical insurance
• A highly competitive pension to help you build a strong foundation for retirement
• Access to an annual performance-related bonus
• Training and development to help you progress your career
• A great selection of additional benefits through our flexible benefits scheme
• Life assurance to provide peace of mind for you and your loved ones
• Up to 2 days of paid volunteering a year

If we’re lucky to receive a lot of interest, we may close the advert early. Please ensure to submit your applications as soon as possible.  

Say hello to Virgin Money

Virgin Money is so much more than just a bank. As part of the Nationwide group, together we're the UK's first full-service mutual bank serving millions of retail and business customers and all driven by our purpose; Banking but fairer, more rewarding and for the good of society. With us, you’ll be part of an organisation uniquely positioned to make a difference to the lives of customers, communities and broader society and embark on a collaborative, customer obsessed, and fun-filled career journey. Embrace the weekdays, enjoy fantastic perks, and make a meaningful positive difference. Time to discover what it means to be part of the first mutual full-service banking provider.  

Be yourself at Virgin Money

At Virgin Money, we celebrate everyone. We have fun, think big, and relentlessly include each other, all in pursuit of our purpose: Banking – but fairer, more rewarding, and for the good of society.  We’re committed to creating an inclusive culture where colleagues feel safe and inspired to contribute, speak up and be heard.    

As a Disability Confident Leader, we're committed to removing any obstacles to inclusion.  If you need any reasonable adjustments or support making your application, contact our Talent Acquisition team careers@virginmoney.com

Please note: If we receive a high volume of eligible applications, we may need to prioritise candidates whose skills and experience most closely align with the role, while still ensuring fair and equitable consideration for all applicants.

Now the legal bit

We’re in the process of bringing Virgin Money and Nationwide together which, subject to Court approval, will happen on 2 April 2026. You can find out more about what this means at https://uk.virginmoney.com/nationwide-transfer. If you’re successful in securing a role with us, your employment will move automatically to Nationwide when this transfer goes ahead.

Although some of our roles allow you to be based anywhere in the UK, we'll need you to confirm you have the right to work in the UK. 

If you're successful in securing a role with us, there are some checks you need to complete before starting. These include credit and criminal record checks and three years' worth of satisfactory references. If the role is part of the Senior Manager Regime and Certification Regime, it requires enhanced pre-employment checks – we'll ask for six years of regulatory references, and once in the role, you'll be subject to periodic employment checks.