Lead Cyber Security Engineer

Lead Cyber Security Engineer

I’m working with a leading law firm that’s building out a brand-new Security Operations (SecOps) function and they’re looking for a Lead Cyber Security Engineer to help shape it from the ground up.

This is a fantastic opportunity for someone who enjoys being both hands-on and strategic. You’ll not only be the technical lead on key projects, but also play a big part in developing security strategy, mentoring junior colleagues, and driving the firm’s journey towards a zero-trust model and ISO 27001 certification .

Why this role?

• Chance to build and shape a new function in a well-established law firm.
• High visibility role working closely with senior stakeholders.
• Opportunity to lead major security initiatives and strengthen overall cyber resilience.
• Exposure to a wide range of security tools and technologies, from CrowdStrike and Palo Alto firewalls to email/web gateways and NAC solutions.
• Career growth - mentor others, lead projects, and become a go-to technical expert.

What you’ll be doing:

• Taking ownership of CrowdStrike EDR , including policy configuration and SIEM tuning.
• Working with network teams on segmentation, NAC, and firewall controls .
• Leading on incident response , root cause analysis, and runbook development.
• Managing and optimising a wide suite of tools: WAF, DDoS, VPN, perimeter firewalls, email/web security, MFA, SSO, PAM, MDM/MAM, and conditional access.
• Partnering with InfoSec to align platforms with overall security strategy.
• Supporting vulnerability scanning, remediation, and risk mitigation efforts.
• Collaborating with external penetration testers and ensuring compliance with frameworks such as ISO 27001, NIST, and CIS .
• Staying up to date with the latest threats and ensuring best practice is followed across the firm.

What they’re looking for:

• Strong background in cyber security engineering, ideally with experience in:
• CrowdStrike EDR, Mimecast, Tessian (or similar DLP)
• Intune, Entra ID, Active Directory
• Palo Alto firewalls, WAF, Menlo Security
• Security frameworks and compliance (PCI-DSS, ISO 27001, NIST, CIS)
• Networking knowledge and experience leading incident response.
• Relevant certifications such as CPSA, CISSP, or Palo Alto Network Certified Security Ops Professional .