Cyber Security Engineer

Cyber Security Engineer – London (Hybrid)

This is a standout opportunity to help shape and mature the cyber security capability of a leading financial‐services organisation. They’re investing heavily in modern security practices, and this role sits right at the centre of designing how security is built, embedded and continuously improved across a Microsoft‐focused technology estate.

You’ll be hands‐on with the engineering, tooling and architecture that underpin their security posture, while also influencing how secure‐by‐design thinking is applied to major technology decisions. Working closely with the wider IT function, you’ll act as a trusted voice in ensuring controls are practical, risk‐aligned and built to meet regulatory expectations.

If you’re passionate about threat detection, incident response and building modern security capabilities, this role puts you at the heart of a growing cyber function with the scope to make a real impact.

What You’ll Be Doing

• Enhancing and operating core security capabilities including SIEM, MDR, security monitoring, and threat detection tooling
• Supporting Security Incident Response (SIR) activities, including triage, investigation, containment, and recovery
• Contributing to DFIR workflows and helping mature incident playbooks and response processes
• Working with technology and business teams as the go‐to specialist for security controls, tooling, and best practice
• Designing, implementing, and maintaining security solutions across endpoint, identity, network, and cloud environments
• Improving key security processes including vulnerability management, patch governance, IAM, endpoint security, and network security
• Developing and maintaining security policies, SOPs, and incident response playbooks
• Feeding Threat Intelligence / CTI insights into monitoring, detection logic, and response processes
• Supporting projects that uplift enterprise security capabilities (e.g., log aggregation, IAM enhancements, EDR improvements)
• Providing security input into change management, asset management, third‐party assessments, and technology acquisition

What You’ll Bring

Essential:

• 3+ years in a Cyber Security Engineer, Analyst, or similar hands‐on security role
• Experience in financial services or another regulated environment
• Strong technical exposure to security tooling: SIEM, EDR, MDR, vulnerability scanners, patch management, CASB, DLP, penetration testing tools
• Solid understanding of TCP/IP, network protocols, and packet analysis
• Ability to assess the security posture of operating systems, cloud services, and network appliances
• Experience working with cross‐functional teams and communicating clearly with technical and non‐technical stakeholders
• The ability to work across a broad cybersecurity role, dealing with both monitoring, threat detection, and security engineering

Desirable:

• Certifications such as CISSP, CEH, CISM, or similar
• Knowledge of OS hardening and CIS Benchmarks
• Familiarity with ISO27001, NIST, PCI DSS, GDPR, Cyber Essentials
• Experience with IT audit processes and risk assessments
• Exposure to Threat Intelligence platforms, DFIR tooling, or SIR frameworks

Who You Are

• A proactive, curious security professional who enjoys solving problems and improving controls
• Comfortable explaining technical concepts to non‐technical audiences
• Strong communicator with a collaborative mindset
• Someone who thrives in a fast‐moving, regulated environment and takes pride in protecting customer assets

This is a great opportunity to influence and mature a security function while working with modern tooling and a supportive team. If you’re ready to take the next step in your cyber career, we’d love to speak with you.