Security Engineer Intern

OPPORTUNITY The Security Engineer will join Brunswick's Information Security team and play a key role in supporting the firm's secure adoption of AI and emerging technologies. This role will act as a dedicated security professional supporting requests and initiatives originating from the firm's AI team, providing security review, architecture input, and risk-based guidance across third-party AI tools, enterprise platforms, AI-enabled applications, and internally developed solutions. Working closely with the AI team, ICT, application owners, and business stakeholders, the Security Engineer will help ensure new technologies are protected through appropriate security controls and guardrails throughout the development and delivery lifecycle. ABOUT THE ROLE In this role, you will provide technical security expertise across AI-related requests, third-party AI tools, internally developed applications, workflows, enterprise features, and emerging agent-based use cases. Key responsibilities include: * Review and assess third-party AI tools, enterprise AI platforms, and new AI-enabled features, including solutions such as ChatGPT, Claude, Microsoft Copilot, and other emerging technologies. * Review and assess requests relating to AI-enabled solutions, enterprise AI platforms, new features, integrations, and internally developed applications. * Provide security architecture guidance for applications and solutions developed or introduced by the AI team. * Support the implementation of security guardrails, governance processes, and secure design patterns for AI adoption across the firm. * Conduct STRIDE-based threat modelling for new internally developed solutions, AI-enabled workflows, integrations, and automation use cases. * Assess risks associated with AI use cases, including data exposure, prompt injection, model misuse, third-party dependency risk, inappropriate access to sensitive information, and insecure integrations. * Advise on secure design principles, including identity and access management, data protection, logging, monitoring, encryption, resilience, and secure configuration. * Define and document security requirements, architecture decisions, design recommendations, and risk-based remediation actions. * Monitor emerging AI security risks, attacker techniques, and industry best practices, ensuring relevant mitigations are considered within Brunswick's environment. WHAT WE'RE LOOKING FOR We're looking for an experienced, technically capable security professional who can combine strong security engineering expertise with practical judgement and clear communication. The ideal candidate will demonstrate: * 5-7 years' experience in cyber security, information security, security engineering, or a related technical security role. * Proven experience providing security guidance across technology projects, enterprise platforms, AI-related initiatives, third-party tools, cloud-based solutions, or internally developed applications. * Strong understanding of security architecture and secure design principles, including identity and access management, data protection, logging, monitoring, encryption, network security, and resilience. * Familiarity with AI-related technologies, enterprise AI platforms, large language models, agentic AI, and the security risks associated with AI adoption. * Experience conducting STRIDE-based threat modelling, technical risk assessments, or security design reviews. * Practical understanding of cloud and enterprise environments, particularly Microsoft 365, Azure, SaaS platforms, and modern workplace technologies. * Ability to translate technical security risks into clear, business-focused recommendations. * Strong written and verbal communication skills, with confidence engaging technical and non-technical stakeholders. * Understanding of security risks associated with third-party AI tools, internally developed AI applications, integrations, automation, and agent-based use cases. * Sound judgement, attention to detail, and the ability to balance security requirements with business needs. * Experience working in an ISO27001-aligned or regulated environment would be beneficial. * Preferred, but not essential, certifications: * ISC2: CISSP, CCSP, SSCP * ISACA: CISM, CISA, CRISC * CompTIA: Security+, CySA+, CASP+ WHY JOIN US Whether you are joining a client facing team, a core services team, or starting out on your professional career journey, joining Brunswick unlocks a range of employee benefits to support your financial future, health and wellness, family and community and continuous professional development. ABOUT BRUNSWICK Brunswick is a global advisory firm. We help companies tackle high-stakes issues, navigate complex stakeholder relationships, and deliver high-impact outcomes.  Our clients value our ability to anticipate, shape, and respond to the key players and forces in the financial and investment arena, regulatory and geopolitical universe, NGO community, workforce and beyond. They rely on us for deep experience, fresh perspectives and original thinking. So, in Brunswick you will find an exceptional range of experience and talent with a rich mix of backgrounds. From the beginning, we have prioritized attracting, developing, and retaining the best professionals in the industry, united by a culture of inclusivity, excellence, and intellectual curiosity. Founded in 1987 in London, the firm has organically grown to 27 offices in 18 countries across the Americas, Europe, Middle East, Africa, Asia and Australia. We operate as a “one-firm firm” with no individual profit centers. This allows us to assemble fully integrated, bespoke teams for each client, able to draw on the full resources of Brunswick anywhere in the world.    Brunswick is an equal opportunity employer.  All qualified applicants will be considered without regard to race, religion, color, national origin, gender, sexual orientation, age, disability, pregnancy, genetic information, or any other status protected by applicable law. Please read our Global Privacy Notice to understand how your data is managed.

YOUR MISSION As a Security Engineer, you play a crucial role in developing and implementing comprehensive security strategies, policies, and procedures to safeguard Intigriti’s information assets across corporate IT and the Intigriti platform. You are a passionate individual who enjoys building defences against today's cyber threats, targeting infrastructure, data, and employees. You should be able to analyze the current threat environment and Intigriti’s security posture, then design and implement controls in line with our risk appetite. This position requires strategic thinking, technical expertise, and a deep understanding of cybersecurity principles. You will be expected to deploy, manage and maintain preventive and detective controls leveraging security tools, including EDR, SIEM, phishing simulation, and compliance solutions, among others. In addition, you will own and continuously improve Intigriti’s threat detection capabilities. This includes running day-to-day Security Operations Centre (SOC) activities, expanding log coverage, and building high-quality detections in our SIEM. You will use frameworks such as MITRE ATT&CK and MITRE D3FEND to assess threat scenarios, prioritize detection engineering work, and strengthen both preventative and detective controls. WHAT YOU’LL BE DOING Infrastructure Security * Oversee the design, implementation, and maintenance of security across Intigriti infrastructure, ensuring the confidentiality, integrity, and availability of company data. * Collaborate with the IT System Administrator to manage and enhance the overall network and system security. Incident Response, Threat Detection & SOC Operations * Develop, maintain, and run incident response plans to address security incidents promptly and effectively. * Run day-to-day SOC operations, including monitoring, triage, investigation, and response to security alerts. * Assess the company threat landscape using MITRE ATT&CK and MITRE D3FEND to identify detection and mitigation opportunities. * Connect and maintain log sources into our SIEM to ensure relevant coverage across corporate IT and the Intigriti platform. * Write, tune, and continuously improve SIEM detection rules to reduce risk and improve signal quality. * Document detection logic, response playbooks, and lessons learned from incidents to continuously improve processes. Security Awareness and Training * Promote a culture of security awareness among all employees through training programs and communication initiatives. * Conduct regular security training for staff to enhance their understanding of security risks and best practices. Governance & Compliance * Report on Intigriti’s security posture, internally and externally as required. * Stay abreast of industry best practices and emerging threats to inform the development of effective security measures. * Support the development, implementation, and continuous improvement of the organization's security strategy, policies, and procedures. * Support the maintenance of our ISO 27001 and SOC 2 Level 2 certifications. WHAT YOU’LL BRING * Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or a related field. Master’s degree or relevant certifications (e.g., CISSP, CISM) is a plus. * Strong understanding of network and system security. Cloud or application security expertise is favoured. * Experience designing, building and implementing security controls. Programming skills are required. * Experience in threat and vulnerability management are desirable. * Experience operating or supporting a SOC function (monitoring, triage, incident handling). * Experience with SIEM concepts and detection engineering (log onboarding, parsing/normalization, correlation rules, alert tuning). Equivalent experience is acceptable if direct SIEM experience is limited. * Familiarity with MITRE ATT&CK (nice to have) and MITRE D3FEND (nice to have). * Strong communication, and interpersonal skills. * Ability to influence and drive security initiatives at both the tactical and strategic levels. * Familiarity with relevant laws, regulations, and industry standards. WHAT IS IN IT FOR YOU? ✅ Competitive salary ⏰ 26 days of annual leave and Bank Holidays  ⭐ Top-notch Private Healthcare and Health Cash Plan  ⭕ Hybrid working model  ☕ Initial home office budget   ✈️ 2-month work abroad policy  ✍ Great training and yearly learning budget  ⌛ Employer pension scheme  ❇️ Enhanced maternity pay ⛹ Social activities and team outings  ✨ Referral bonus  ❓ Employee Assistance Program   ⚡ Great hardware and access to the best tools to be successful in your role  ☎️ Mobile subscription contribution WHY JOIN US? Here are some great benefits of joining our team:  * Cybersecurity is a great place to be! The security industry is fast-paced and continues to grow even during times of economic uncertainty. * We provide a clear career path and learning budget to help set you up for success. * Join a company that’s making a real impact. In addition to our sustainability goals, we empower ethical hackers from all backgrounds to earn a living. * Be yourself! Our international team celebrates individuality and places a strong focus on diversity and inclusion. * We are the proud winners of the Deloitte Rising Star award in 2020, the Deloitte Fast 50 award in 2021 and Security Innovation of the Year 2025 at the UK IT Industry awards. * We’re backed by top investors who are enabling us to grow internationally.