About this role
#TEAMBULK ARE HIRING AN IT INFRASTRUCTURE AND SECURITY ENGINEER
At Bulkโข, we believe the gym changes everything. It makes you feel stronger, fitter and healthier. For 20 years, weโve been developing elite sports nutrition products for every type of training. Trusted by Olympic athletes and everyday gym-goers, we help you power through training, push your limits, and achieve more.
Join us, and be part of what's next.
IN A NUTSHELL
As the IT Infrastructure and Security Engineer, youโll oversee Bulkโs IT infrastructure and security posture, creating a resilient technical foundation while supporting AI adoption across the business. This role blends hands-on infrastructure management and cyber defence with strategic improvements, threat management, and compliance. Youโll also partner with senior leadership to optimise key toolsets that drive Bulkโs ongoing growth.
WHAT WILL YOU BE DOING?
Infrastructure
Oversee the planning, design, implementation, monitoring, and maintenance of Bulkโs IT infrastructure, including on-premise and cloud-based systems (Google Workspace, Azure, network, firewall, VPN, etc).
Ensure system reliability, resilience, performance, and secure configuration, and updates, adhering to industry best practices.
Lead infrastructure projects, from capacity planning to deployment, to support evolving business requirements.
Support 2nd and 3rd line issues, guiding troubleshooting and resolution in line with SLAs
Create and maintain technical documentation, policies, and procedures, ensuring smooth handover to Service Desk teams.
Lead the incident response lifecycle, including managing security incidents and data breach containment, eradication, and post-mortem analysis.
Serve as a dedicated Tier 3 escalation point for the Helpdesk team, providing expert advanced technical support and resolution for complex incidents.
AI Tooling & Enablement
Own the setup, configuration, and maintenance of AI tooling across the business (e.g., Claude Code, Cowork, Codex-style coding/agent tools), including integrations, MCP server configuration, and connector management.
Manage user access, permissions, and governance for AI tools, ensuring least-privilege access and secure connector/integration setup.
Partner with teams to onboard new AI tools and integrations, balancing productivity gains with security and compliance requirements.
Cybersecurity
Develop and implement security measures to protect Bulkโs IT environment, continuously enhancing the security framework.
Monitor, investigate, and remediate security alerts, incidents, and Indicators of Compromise (IOCs).
Conduct threat analysis to address new and emerging risks; deploy response strategies to mitigate vulnerabilities.
Manage and optimise security tools, including Next-Gen SIEM, SOAR, EDR/MDR/XDR, and cloud security solutions (CASB, ZTNA, SASE).
Lead cybersecurity audits, compliance initiatives, and certification efforts (Cyber Essentials, ISO 27001).
Perform regular vendor security assessments and coordinate with stakeholders on secure technology solutions.
Perform regular vendor security assessments and coordinate with stakeholders on secure technology solutions.
WHAT ARE WE LOOKING FOR?
Bachelorโs degree in Cybersecurity, IT, or a related field; relevant certifications (e.g., CISSP, CISM, CompTIA, ITIL).
3+ yearsโ experience in infrastructure and security management within a medium-sized enterprise.
Proficient in networking, cloud, and endpoint security technologies, including CrowdStrike, Cisco, Azure, VSphere, Windows Server, Mac/Windows, Jamf/Intune MDMs Automox, and VPNs.
Hands-on experience with infrastructure management, cloud solutions (Azure, Google Workspace), and security frameworks.
Strong knowledge of security monitoring, incident response, and threat analysis, including managing IOCs and remediation.
Experience with compliance standards (e.g., Cyber Essentials, ISO 27001) and conducting vendor security assessments.
Experience setting up and administering AI coding/agent tools (e.g., Claude Code, GitHub Copilot, Codex) and their integrations, including MCP servers, connector permissions, and access management.
Desirable Skills
ITIL and project management certifications (e.g., Prince2).
Advanced knowledge of infrastructure best practices and proactive problem-solving skills.
Experience working with Netskope.
Familiarity with emerging AI infrastructure patterns (agentic tools, MCP, connector-based integrations) and associated access control best practices.
Excellent communication and team leadership abilities.
Hands-on experience with Netskope CASB/SSE, including SSL/TLS inspection, DLP, Zero Trust architecture, CASB policy design, and SCIM-based provisioning to support enterprise cloud security.
WHAT ARE THE GAINS?
Monthly Bulk Bank Benefits Allowance ๐ฆ including a subsidised Gym Membership ๐๏ธ
A day off to celebrate your Birthday ๐
PerkBox Subscription ๐
60% discount on all Bulkโข products ๐ฐ
Flexi Start ๐
Additional Annual Leave (optional) ๐ด
Teammate Pension Scheme ๐ฐ
Life Assurance ๐
Medicash ๐ฉโ๏ธ
A day off for Volunteering (optional) ๐ค
Cycle to Work Scheme ๐ฒ
Enhanced Maternity & Paternity leave ๐ฃ and workplace nursery scheme ๐ง
Bulkโข Pantry ๐ด
Happy Hour Drinks Fridge (Thursdays & Fridays) ๐
Summer Working Hours ๐
LOCATION: Colchester, UK
HYBRID: 3 days in the office, 2 days working from home
OUR COMMITMENT ๐
Bulkโข is a place where employees have a voice fundamental to our success as a business. Building a diverse and inclusive team enables us to reach and connect with our global customers, from developing delicious recipes to how our brand is built and perceived.
Regardless of age, disability, race, gender, religion, sexual orientation, education, neurodiversity or any protected characteristic, if you are a passionate risk-taker and eager to make a difference in sports nutrition, we want to hear from you. We know that a CV doesnโt begin to scratch the surface, and that the things that make you who you are could be a real game-changer for us. We are proud to be an equal opportunities employer.
PRIVACY ๐
Bulkโข takes your privacy seriously and will only use your personal information to administer your application for this role. When you apply, we shall process your details for this vacancy only and we will not pass your details onto a third party. We may contact you by email, text or telephone about the progress of your application. This processing is conducted lawfully on the basis of legitimate interests.
Tired of cold applications?
Sign up with Clera and we'll reach out the moment a role actually fits you โ no more spraying applications into the void.
Know someone who'd be great for this?