Senior Cyber Security Engineer

Salary

£? - ? per year

• We require 5+ years of experience in a dedicated Cyber Security Engineering or SOC Tier 3 role.
• We require strong hands‑on experience with Crowd Strike Falcon Prevent, Insight, and Discover.
• We require solid experience writing complex Splunk Search Processing Language (SPL) queries and managing Splunk Enterprise Security (ES).
• We require a strong understanding of network protocols, cloud security across AWS and Azure, and the MITRE ATT&CK framework.
• We require the ability to act as a technical escalation point for high‑priority security incidents.
• We require experience with vulnerability assessment tools; 2+ years is a bonus.
• We require familiarity with penetration testing and web application testing.
• We require foundational cybersecurity certifications such as CompTIA Security+, Network+, CYSA+, or GSEC.
• We prefer advanced certifications such as CISSP, GCIH, GCIA, or CCSP.
• We require Splunk Certified Cybersecurity Defence Engineer certification.
• We ideally have 2 or more Crowd Strike certifications, such as CCFA, CCFR, or CCSE.
• We require willingness to complete mandatory Right to Work checks as part of the pre‑screening process.

• We lead the deployment, policy configuration, and maintenance of the Crowd Strike Falcon platform to strengthen our security posture.
• We collaborate with our SOC partner to design and optimise Splunk dashboards, alerts, and data models to identify sophisticated threats.
• We act as a technical escalation point for high‑priority security incidents, using EDR and SIEM tools to enable rapid containment.
• We develop Security Orchestration, Automation, and Response (SOAR) workflows to reduce manual intervention and improve response times.
• We proactively hunt for undetected malicious activity using specialised queries.
• We train and upskill our existing team in Crowd Strike, Splunk, and security analysis to support professional development and leadership.
• We transform raw security telemetry into actionable intelligence for public‑sector security operations.

• AWS
• Azure
• Cloud
• Support
• Network
• Security
• Splunk
• Web

We are a leading public‑sector provider supporting a local government client and offer an opportunity to contribute to public safety and community resilience. This Senior Cyber Security Engineer role is highly technical and focused on Crowd Strike endpoint protection, Splunk security telemetry, incident response, automation, and threat hunting. We are committed to fostering an inclusive workplace that values diversity and equal opportunity.