Senior Security Engineer

The Role

As a Senior Security Engineer, you’ll play a pivotal role in strengthening and maintaining our technical security setup to protect Next’s systems and customers against emerging threats. Working as part of our dedicated Security Engineering Team, you’ll design, implement, and fine-tune critical security controls while mentoring junior colleagues and taking a leading hand during incident responses and key security projects. You will collaborate closely with wider IT, Vulnerability & Threat Management, and Incident Response teams to ensure our security controls integrate seamlessly across the business. We will support your professional development from day one, helping you expand your technical expertise while working flexibly on an office-based hybrid contract with a 24x7 shift and call-out rota.

What You'll Take On

- Design, deploy, and maintain core technical security controls—including EDR, SIEM, SOAR, PAM, and WAFs—ensuring they remain effective against new and emerging threats.

- Lead key security delivery projects from scoping to completion, clearly communicating progress and collaborating with stakeholders across IT.

- Establish automated workflows to enrich alert data, streamline incident management, and improve operational efficiency.

- Support the Incident Response team during major security incidents, providing clear technical direction and rapid root-cause analysis.

- Maintain accurate control baselines, performance metrics, and operational documentation to inform future budgeting and licensing decisions.

- Mentor and guide junior team members, helping build technical capability and supporting their ongoing development plans.

What You'll Bring

- Proven, hands-on experience configuring and administering enterprise security tools in a complex IT environment, ideally within retail or eCommerce.

- In-depth knowledge of core Information Security domains, attack techniques, and practical application of frameworks such as MITRE ATT&CK.

- Proficiency with scripting languages like PowerShell or Python to automate routine tasks and streamline workflows.

- Strong familiarity with operating system environments (Windows Server or Linux), networking principles, or application security.

- Clear communication skills, with the ability to translate complex technical concepts into concise advice and business cases for senior stakeholders.

- A calm, structured approach under pressure, excellent attention to detail, and a commitment to high change-management standards.

- A collaborative mindset, a passion for sharing knowledge, and relevant industry certifications (or working towards them).

#LI-LE1 #LI-Hybrid