Security Engineer

The British flower market is worth £1.2bn and MM Flowers supplies fresh cut flowers and bouquets to the U.K.’s and Europe’s leading flower retailers. We grow and source the highest quality and most beautiful blooms across the world, delivering colour, passion, and inspiration through breath-taking bouquets.

Established in 2007, MM Flowers has grown exponentially every year and is based in a purpose built, state-of-the-art facility in Alconbury, Huntingdon. MM Flowers employs over 1000 people who are dedicated to delivering exceptional quality and service to our customers.

MM Flowers’ values and behaviours form the basis of our culture and are a guide to the way we work as individuals, in teams and with our customers, They can be used as a guide and a reference to support processes such as team development, performance management, recruitment, identification of talent, and on-going coaching to support the delivery of our ambitious growth plans.

Creating Meaningful Moments that do good for people, and our planet.

We are currently looking for a Security Engineer

The Security Engineer is a key role for MM Flowers during an exciting time of change, transformation, and growth at MM Flowers. The Security Engineer role will be a key enabler to ensure that the organisation has the processes, governance, and technology in place to protect the organisation from cyber threats.

Working closely with the IT Team and business stakeholders, the Security Engineer will develop and deliver a programme of security enhancements alongside the continuously improvement of the security posture through understanding and mitigating risks.

This is a huge opportunity to utilise your previous experience to assist in building a security focused IT function.

• Drive Cyber & Information Security awareness across the organisation ensuring that all colleagues have a continuously improving understanding of threats and the role they play.
• Relentless focus to reducing vulnerabilities with a continuous improvement mindset. Manage the day-to-day activities of threat and vulnerability management, identify risk tolerances, recommend treatment plans and communicate information about residual risk.
• Work with key vendors to design and build a cyber security programme that will harden controls and reduce cyber risk at MM Flowers.
• Using the NIST 800-53 framework build a continuous improvement programme of works that target areas of low maturity to bring to an agreed baseline.
• Responsible for the ongoing monitoring, assessment, and eradication of vulnerabilities across the environment using CVSS to target and prioritise remediation.
• Lead investigations into any cyber incidents.
• Understanding the current risk profile of the organisation by executing a programme of awareness and detection initiatives including Penetration Testing, Vulnerability Analysis, reviewing as-built documentation, security assessments and improvement programmes.
• Monitoring and managing a 3rd party Security Operations Centre (SOC), reviewing and monitoring SIEM inputs / outputs with the SOC team and ensuring that appropriate logs are ingested and monitored.
• Building policies and procedures to enhance the controls and governance of cyber assets across the organisation.
• Develop and own the security compliance and audit framework.
• Develop (and automate) reporting to ensure key metrics are visible and shared with appropriate stakeholders.
• Working with Service Operations to ensure Asset management processes and controls are in place and embedded.
• Work with, and support the Operations team and act as an escalation point for any operational service issues.
• Driving a security by design mentality and ensure that security projects are understood and prioritised.
• Understand the current threat environment and always be aware of advances in technology trends and new threats that could impact MM Flowers.

What you can already do

• Degree in Computer Science (or similar)
• Obtained, or working towards CISMP / CISSP
• Understanding of GDPR
• Understanding and knowledge of NIST 800-53 / ISO27001 / GDPR.
• Experience of managing Cyber Security in a fast-paced manufacturing organisation.
• Experience in designing, building, testing, and implementing security systems, and monitoring their effectiveness.
• Have an excellent understanding of technology infrastructures including Next-Gen Firewalls, VPN, Cloud (Public and Private) workloads, Data Loss Prevention, IDS/IPS, Web-Proxy, and Security Audits.
• Experience working across a wide range of technologies and products including Azure AD, M365 security principles, SCCM and Group Policies.
• Experience of implementing IAM and PAM and ensuring least privilege controls are in place.
• Core Networking knowledge (VLANS / TCP/IP)
• Exposure to ZTS, Micro-segmentation (including VMWare NSX) and zero trust architecture principles.
• An understanding of Operational Technology (OT) used in a manufacturing environment including ICS / Warehouse automation PLCs.
• Working in a controlled environment with experience, knowledge, and desire to continuously improve.
• Deliver solutions within the appropriate framework and methodology whilst ensuring the supportability of services delivered.
• Experience with incident detection, incident response, and forensics.
• Experience with Firewalls (functionality and maintenance), Microsoft Office 365 Security, XDR, and Endpoint Security.
• Proficiency in a variety of languages such as Python, Power Shell or other scripting languages.
• Ability to work under pressure in a fast-paced environment.
• Strong attention to detail with an analytical mind and outstanding problem-solving skills.
• Great awareness of cybersecurity trends and hacking techniques.
• Understanding and knowledge of IT service management (ITSM) and Information Technology Infrastructure Library (ITIL).
• Understanding of IT standards and controls
• Excellent understanding of application development methodologies and infrastructure and network architecture

So, what’s the package? When you work at MM Flowers you get more than just a salary.

• Holiday allowances are calculated on your days worked and you can find your allowance in your offer letter.
• Pension scheme - You will be auto enrolled onto the company pension scheme after 3 months. At present we operate an auto enrolment scheme where you will benefit from contributions from us.
• On- site Parking – free parking is available onsite.
• Recommend a Friend Scheme – £250 is payable to you when you recommend a friend who is successful through the application process and successfully completes their 3-month probationary period.
• Career progression – we actively encourage employees from within the business to consider roles which become available and whether that be within their field or want to consider a cross functional move.
• Wonderful working environment– we are all working in a modern contemporary purpose-built State of the Art facility.
• We are committed to an open ethical and fair working environment and have a Whistleblowing Policy in place to ensure complaints and concerns are handled appropriately.
• We work with an Occupational Health provider to support our employees both mentally and physically.
• Four times a year we run amazing Peak promotions with daily prizes to win.
• We gather employee feedback annually to look at how we can continually improve the employee experience.
• We work with Grocery Aid who provide confidential 24/7 Helpline, 365 days a year for anyone who is working or has worked within the grocery trade, regardless of length of service providing emotional and practical support to help through a difficult time.
• We celebrate diversity by running a calendar of events throughout the year.
• We have an active Employee Forum creating a safe space to encourage ongoing open dialogue about how we improve the employee experience.
• We are affiliated with Stronger Together who provide guidance, training, resources and a network for employers, labour providers, workers and their representatives to work together to reduce exploitation.

MM Flowers are a proud equal opportunity employer, and we understand the benefits of nurturing a diverse and inclusive workplace. All qualified applicants will receive consideration for employment without regard to race, colour, sex, religion, national origin, age, sexual orientation, gender identity, gender expression, disability, genetic information. Applicants who require a reasonable accommodation to complete the job role advertised are encouraged to apply.

We believe we can only achieve our potential if we employ a diverse population of people, ideas, and perspectives. We are committed to grow our workplace culture, encouraging team members to feel unique valued and engaged, enabling them to achieve their full potential.