Cyber Security Engineer

Overview

Cyber Security Engineer

Location:
Staines (TW18 3DZ
) or Manchester (M50 3SP
) - Hybrid Working

Permanent

Salary range: 54,800.00 - 65,000

Role specific benefits: Full time, 37.5 scheduled weekly hours

We consider all types of flexibility, including locations, hours and working patterns.

We make health happen

At Bupa, we’re passionate about technology. With colleagues, customers, patients and residents in mind you’ll have the opportunity to work on innovative projects and make a real impact on their lives.

Right from the start you’ll become part of our digital strategy, joining us on our journey and developing yourself along the way.

As a Cyber Security Engineer the successful candidate is tasked with shaping, implementing, and upholding Bupa's enterprise security framework and its related measures. The role involves ensuring the functionality of the tools and systems utilised by Bupa Security Operations and the organisation  a member of the Security Engineering team, responsibilities include the upkeep of security measures and protocols, overseeing the performance of monitoring and reporting devices, and enhancing security strategies, guidelines, and rule sets.

Additionally, the role requires the provision of documented proof of enhancements made.

How you’ll help us make health happen:

• Configure, implement, and manage security hardware and software systems, across both On-Premise & Cloud/SAAS Solutions
• Maintain accurate documentation and team processes for the allocated tools and services
• Craft playbooks, policies, and custom rulesets; perform tool tuning and allow listing to enhance security maturity
• Contribute to the formulation of strategies for responding to and recovering from security incidents and breaches
• Lead efforts to validate and test both hardware and software solutions, ensuring compliance with security standards
• Monitor and manage security systems to ensure optimal performance and timely patching and updates
• Work closely with vendors, system designers, and architects to shape and develop technical solutions that align with security requirements
• Act as a subject matter expert, providing technical advice and contributing to the design and implementation of security policies and procedures
• Collaborate with product management teams to ensure security milestones are met within delivery/sprint timelines with focus on continuous improvement
• Be a mentor for team members, supporting and sharing knowledge
• Automate wherever possible and challenge processes where there is no automation
• Understand the business needs, work closely with key stakeholders
• Knowledge of security policy implementation and deployment; experience of creating technical security standards based on established policy objectives and requirements
• Continuously learn and adapt to new technologies, staying up to date with emerging security threats and trends

• High interpersonal skills to enable partnership with IT and business stakeholders operating at all levels within the organisation
• The ideal candidate should possess a diverse IT background, with substantial experience in both BAU support and project-based environments, across disciplines such as End-User Computing, Hosting, and Networks
• Experience of working in a Product based environment and the ability to demonstrate and evidence Agile working practices
• Proficiency in cloud technologies (Azure, AWS, GCP) is highly beneficial
• Proficiency in Defender and Sentinel i.e deployment of Log Sources, Data Collection Rules, Analytical Rule creation/tuning, workbooks, troubleshooting and issue resolution
• Skilled in network troubleshooting and issue resolution
• Familiarity with intrusion techniques at the perimeter and host level is required
• Automation tooling (logic apps, Sentinel Automations)
• Experience with the following will be considered an advantage:
  • Infrastructure as Code
  • DLP
  • SIEM Tools
  • Vulnerability Management systems
  • Network security tools
  • AV/EDR Solutions
  • M365/Defender 365
  • Microsoft Sentinel
  • KQL
  • Purview/EOP
  • Firewalls/Proxies
  • Scripting abilities

Qualifications in Microsoft, ISC2 (Cyber), Networking learning paths advantageous:

• Professional or equivalent…