Senior Cyber Security Engineer

Senior Cyber Security Engineer

Department: IT

Employment Type: Full Time

Location: London

The Senior Cyber Security Engineer is responsible for the design, implementation, management, and continuous improvement of the organisation’s cyber security controls across on-premise and cloud environments.

The role will lead the operational security capability, ensuring robust protection of infrastructure, data, and services in a regulated financial services environment. The successful candidate will have deep technical expertise across Microsoft security technologies, network security, threat detection and response, and regulatory security frameworks.

Security Architecture & Engineering

• Design and implement security controls across complex hybrid architectures (on-premise and Azure cloud environments).
• Lead security configuration and hardening across Azure and Microsoft 365, including full utilisation of E5 Security and Defender suite capabilities.
• Implement and manage Microsoft Defender XDR solutions.
• Develop and maintain secure network architectures including segmentation and Zero Trust principles.

Threat Detection & Response

• Manage and optimise Azure Sentinel (Microsoft Sentinel)
• Manage and tune Darktrace NDR.
• Support incident detection, investigation, and response processes.

Vulnerability & Risk Management

• Manage vulnerability assessment and remediation processes using Tenable Nessus and Microsoft Defender.
• Conduct vulnerability scanning, reporting, and remediation tracking.
• Contribute to risk assessments aligned with NIST and regulatory frameworks.

Data Security & Compliance

• Implement and manage Microsoft Purview
• Support Cyber Essentials Plus compliance activities.
• Assist with internal and external security audits.
• Ensure security controls meet regulatory requirements in a fast-paced, regulated environment.

Network & Infrastructure Security

• Implement and manage security controls
• Support network automation initiatives where appropriate.
• Work across various Linux distributions

Automation & Reporting

• Develop automation using Azure Logic Apps and related tools.
• Create dashboards and reporting using Power BI or similar technologies.
• Continuously improve security operations through automation and optimisation.

• Strong technical understanding of security controls required to secure complex hybrid architectural solutions.
• Extensive experience managing security within Azure and Microsoft 365 environments, including E5 Security suite.
• Hands-on experience with;
  Microsoft Sentinel, Defender XDR, Darktrace NDR, Microsoft Purview (DLP and data classification), Palo Alto NGFW and Panorama
• Proficiency in Kusto Query Language (KQL).
• Experience integrating diverse security log sources into SIEM platforms.
• Strong understanding of vulnerability management tools including Tenable Nessus and Microsoft Defender.
• Experience implementing and managing network security technologies (Firewall, IDS, WAF, segmentation).
• Experience with enterprise data centre networking environments.
• Working knowledge of multiple Linux distributions.
• Experience working within the NIST Cybersecurity Framework.
• Experience supporting Cyber Essentials Plus accreditation.
• Demonstrable experience operating in a regulated environment (e.g., financial services).
• Experience with Azure Logic Apps and security automation.
• Experience with Power BI or similar reporting tools.
• Network management and automation experience desirable.
• Recognised Microsoft Security certifications