Senior Cyber Security Engineer

Could you be responsible for ensuring the security of our information systems through technical security engineering, including designing, implementing, and maintaining security measures to protect against cyber threats?

Could you provide subject matter expertise, assuring new services are sufficiently secure?

Could you work alongside our team of in-house IT and cyber security analysts and our third-party service providers?

• Lead projects to deliver well-architected secure services.
• Develop and maintain security architectures and frameworks.
• Configure, manage, and tune security tools and services, including network security controls, intrusion detection / prevention systems (IDS / IPS), Web-Application Firewall, and endpoint protection.
• Mentor colleagues on technical and non-technical cyber security concepts.
• Assist teams selecting and adopting security controls and processes, supporting the principles of Privacy by Design / Secure by Design.
• Support effective management of cyber security risks by developing and implementing appropriate corrective and preventative action plans and providing relevant information to internal governance boards, risk management teams, and forums.
• Promote the adoption of relevant cyber security standards, frameworks, and compliance-led initiatives aligned with the organisation's strategic direction, conducting compliance gap assessments as necessary.
• Lead the investigation of suspected attacks and manage security incidents, engaging and collaborating with external specialists when required.
• Instil excellence and drive continual improvement by refining processes, methodologies, standards, and technology choices.

• Highly proficient in Microsoft Sentinel for security information and event management (SIEM), including writing custom Sentinel KQL to analyse security events and logs to identify potential threats and incidents.
• Strong knowledge of scripting and automation using languages such as Python and PowerShell.
• Robust knowledge of Microsoft Entra ID (formerly Azure AD) for identity and access management.
• In-depth understanding of security architectures, frameworks, and best practices, including Zero Trust Network Access (ZTNA) principles and implementation, and Secure Access Service Edge (SASE) frameworks.
• Knowledge of relevant security standards and regulations (e.g., ISO 27001, NIST).
• Extensive experience in designing, implementing, and managing advanced security solutions, including network security controls, IDS/IPS, endpoint protection, and SIEM systems.
• Strong experience with Microsoft Defender suite, including Defender for Endpoint, Defender for Identity, and Defender for Cloud.
• Experience in leading security projects and initiatives.
• Hands-on experience with security monitoring and analysis tools.

Please apply early, as we'll be reviewing candidates throughout. We reserve the right to close the ad in advance of the published date.

• Holidays: 36 days annual leave (including bank holidays) + option to buy 5 extra days.
• Pension scheme: Up to 6% contributory pension.
• Flexible working: We do our best to accommodate your preferred work style.
• Learning & Development: Wide range of career opportunities + comprehensive learning.
• Discounts: Access to Blue Light Discount Card and employee benefits platform.
• Wellbeing Assistance: Access to mental health and wellbeing assistance.
• Team Working: Champion our mission in a collaborative team.

We are proud to participate in the disability confident scheme for roles based in the UK. During the application process, you will be asked if you wish to apply under the scheme.