Cyber Security Engineer

About the Role

We are seeking a proactive and detail-oriented Cyber Security Engineer to join our growing IT team within a Group services environment. This is a hands-on role where you will play a key part in protecting the organisation’s systems, data, and infrastructure from evolving cyber threats.

You’ll work closely with infrastructure, development, and business teams to ensure security is embedded across all areas of the organisation, while maintaining compliance with regulatory requirements.

Key Responsibilities

• Monitor, detect, and respond to cyber threats using security tools including SIEM, EDR, and threat intelligence platforms
• Analyse logs and security events to identify risks, unusual activity, and potential breaches
• Investigate incidents such as phishing, malware, and unauthorised access, coordinating response activities
• Maintain and update the cyber security risk register
• Advise on secure configuration and system hardening across infrastructure and cloud environments
• Review firewall rules, access controls, and integrations to ensure least-privilege access
• Support compliance with regulatory requirements (e.g. FCA, GDPR) and internal policies
• Develop and maintain cyber security policies aligned with best practice
• Deliver internal security awareness initiatives, including phishing simulations and training
• Administer identity and access controls within Microsoft Entra ID (MFA, Conditional Access, PIM)
• Manage endpoint security and application control technologies
• Support Cyber Essentials and Cyber Essentials Plus certification
• Assist with business continuity and disaster recovery planning

Skills & Experience

Essential:

• Hands-on experience with SIEM, EDR, and vulnerability management tools
• Strong knowledge of Microsoft 365 security and Microsoft Entra ID
• Experience with Conditional Access, MFA, and identity security controls
• Understanding of cyber security frameworks and risk management principles

Desirable:

• Experience with Privileged Access Management and email security platforms
• Knowledge of FCA regulations and operational resilience (DORA)
• Experience supporting Cyber Essentials / Cyber Essentials Plus
• Degree in Cyber Security, Computer Science, or related field (desirable)
• Industry certifications such as CompTIA Security+, SSCP, SC-200, SC-300, or AZ-500
• CISM or CISSP (advantageous but not essential)

Key Competencies

• Strong attention to detail with the ability to deliver accurate results under pressure
• Excellent problem-solving and analytical skills
• Clear and effective communication, both written and verbal
• Collaborative team player with a proactive mindset

Why Join Us?

• Opportunity to work in a regulated, security-focused environment
• Exposure to modern security technologies and practices
• Support for professional development and certifications
• Collaborative and forward-thinking team culture