Cyber Security Engineer

Role Overview

• Configure, implement, and manage security hardware and software systems, Across both On-Premise & Cloud/SAAS Solutions
• Assume responsibility for maintaining accurate documentation and team processes for the allocated tools and services.
• Craft playbooks, policies, and custom rulesets, perform tool tuning and allowlisting to enhance security maturity.
• Contribute to the formulation of strategies for responding to and recovering from security incidents and breaches.
• Lead efforts to validate and test both hardware and software solutions, ensuring compliance with security standards.
• Monitor and manage security systems to ensure optimal performance and timely patching and updates.
• Work closely with vendors, system designers, and architects to shape and develop technical solutions that align with security requirements.
• Act as a subject matter expert, providing technical advice and contributing to the design and implementation of security policies and procedures.
• Collaborate with product management teams to ensure security milestones are met within delivery/sprint timelines with focus on continuous improvement.
• Be a mentor for team members, supporting and sharing knowledge.
• Automate wherever possible and challenge processes where there is no automation.
• Understand the business needs, work closely with key stakeholders.
• Knowledge of security policy implementation and deployment; experience of creating technical security standards based on established policy objectives and requirements.
• Continuously learn and adapt to new technologies, staying up to date with emerging security threats and trends.

Requirements

• High interpersonal skills to enable partnership with IT and business stakeholders operating at all levels within the organisation.
• The ideal candidate should possess a diverse IT background, with substantial experience in both BAU support and project-based environments, across disciplines such as End-User Computing, Hosting, and Networks.
• Experience of working in a Product based environment and the ability to demonstrate and evidence Agile working practices.
• Proficiency in cloud technologies (Azure, AWS, GCP) is highly beneficial.
• Proficiency in Defender and Sentinel i.e deployment of Log Sources, Data Collection Rules, Analytical Rule creation/tuning, workbooks, troubleshooting and issue resolution
• Skilled in network troubleshooting and issue resolution.
• Familiarity with intrusion techniques at the perimeter and host level is required.
• Automation tooling (logic apps, Sentinel Automations)
• Experience with the following will be considered an advantage:
• Infrastructure by Code
• DLP
• SIEM Tools
• Vulnerability Management systems
• Network security tools
• AV/EDR Solutions
• M365/Defender 365
• Microsoft Sentinel
• KQL
• Purview/EOP
• Firewalls/Proxies
• Scripting abilities
• Qualifications in Microsoft, ISC2 (Cyber), Networking learning paths advantageous: Professional or equivalent certifications. Certified Microsoft SC 200/500/900 Certified in CyberSecurity (and above).

Tech Stack

• AWS
• Azure
• Cloud
• Cyber Security
• Firewalls
• Google Cloud Platform

Benefits

• 25 days holiday, increasing through length of service, with option to buy or sell
• Bupa health insurance as a benefit in kind
• An enhanced pension plan and life insurance
• Onsite gyms or local discounts where no onsite gym available
• Various other benefits and online discounts