IT Infrastructure Security Engineer

Leeds United is seeking an experienced and hands-on IT Infrastructure Security Engineer to become the Club's first dedicated cybersecurity specialist. Reporting to the IT Manager, the role is a technical specialist position responsible for building the Club's security foundations, embedding security into infrastructure projects, and developing ongoing security operations and best practice across the organisation. The role supports critical systems, data, and infrastructure while contributing to major technology projects, including stadium expansion plans.

• Design and implement secure network architectures across club and stadium environments, including network segmentation, firewall configurations, and zero-trust access controls.
• Support the secure design and deployment of new infrastructure projects and review and validate technical security requirements across infrastructure environments.
• Act as security lead across technology workstreams for stadium development projects, reviewing supplier and vendor security requirements, defining security acceptance criteria and secure build standards, and embedding cybersecurity throughout project delivery.
• Establish and manage the Club's vulnerability management programme, conduct vulnerability assessments, coordinate remediation, manage patching across servers, endpoints, and infrastructure, and monitor emerging vulnerabilities and security risks.
• Manage and develop Microsoft Entra ID and Microsoft Intune environments, implement and maintain Multi-Factor Authentication, develop Conditional Access and Privileged Access Management controls, and support secure user lifecycle and access management.
• Develop, implement, and maintain the Club's Incident Response Plan, support Business Continuity and Disaster Recovery planning, participate in testing and exercising cyber response procedures, and investigate and respond to security incidents.
• Implement and manage SIEM and security monitoring solutions, support threat detection and security investigations, monitor security events, recommend improvements, and produce security reports and updates for IT leadership.
• Support compliance with UK GDPR and data security obligations, work alongside the Data Protection Officer, assess and mitigate data security risks, and contribute to security documentation, standards, and policies.
• Conduct supplier security assessments and reviews, ensure third-party partners meet security standards, deliver security awareness initiatives and phishing simulations, and promote good cybersecurity practices across the organisation.

• CompTIA Security+, SC-200, or an equivalent cybersecurity qualification.
• Strong technical knowledge across cybersecurity and infrastructure security.
• Excellent problem-solving and analytical skills.
• Strong communication and stakeholder management abilities.
• Ability to work independently and take ownership of security initiatives.
• Strong documentation and reporting skills.
• Commitment to continuous professional development.
• Minimum 3 years' experience in a hands-on technical cybersecurity role.
• Experience working with Microsoft 365 security technologies.
• Experience administering Microsoft Intune and Microsoft Entra ID.
• Experience implementing MFA, Conditional Access, and identity management controls.
• Experience securing network infrastructure including VLANs, firewalls, IDS/IPS, and segmentation.
• Experience using vulnerability management tools such as Nessus, Qualys, or similar.
• Experience developing or contributing to incident response processes.
• Experience conducting technical security assessments and risk reviews.

• Experience within sport, entertainment, stadium, or public venue environments.
• Experience implementing Microsoft Sentinel, Splunk, or similar SIEM platforms.
• Knowledge of OT/IoT security in venue environments.
• Experience working alongside Managed Service Providers.
• CISSP, CISM, or ISO 27001 Lead Implementer certification.
• Experience supporting major technology or infrastructure projects.
• Experience within complex multi-site environments.

• Competitive salary package

• Pension scheme
• Range of exciting benefits and perks