Cyber Security Engineer

Salary: £40,000 - 50,000 per year

• We require 3 years of experience as a Cyber Security Engineer.
• We need hands-on experience with security monitoring, incident investigation and vulnerability management.
• We need practical knowledge of Microsoft security technologies, including Microsoft Defender XDR, Microsoft 365 security controls, Microsoft Intune and Endpoint Security.
• We need experience administering endpoint detection and response platforms;
  Crowd Strike Falcon experience is advantageous.
• We need a good understanding of identity and access management, MFA, data loss prevention, encryption and advanced threat protection.
• We need strong knowledge of cyber security principles and technologies, including Secure Email Gateways, DNS filtering, Secure Web Gateways, CASB, endpoint protection, anti-virus and related security controls.
• We need knowledge of secure design principles and the ability to assess technical solutions, configurations and changes.
• We need working knowledge of security frameworks and assurance activities, including ISO 27001, Cyber Essentials, CIS Controls and the NIST Cybersecurity Framework.
• We need awareness of data protection, AI governance and the security risks associated with emerging technologies.
• We need the ability to analyse complex security issues, evaluate urgency and business impact, and make clear, timely decisions.
• We need the ability to communicate technical risks and recommendations clearly to customers, colleagues and technical and non-technical stakeholders.
• We need strong written skills, with experience producing concise policies, standards, procedures, reports and governance documentation.
• We need a collaborative, customer-focused approach and the confidence to provide trusted security advice.
• We need a proactive, self-driven approach and the ability to respond dynamically and at pace to emerging threats, risks and priorities.
• We need a continuous improvement mindset, including the ability to identify opportunities to use automation to increase efficiency, consistency and service quality.
• We need a commitment to continual learning and knowledge sharing.
• We need excellent written and spoken English;
  German language capability is desirable.
• We need a relevant Microsoft security certification, such as Security Operations Analyst or Identity and Access Administrator, or an equivalent current certification.
• We need CompTIA CySA+, CISSP or another recognised cyber security qualification, or a demonstrable commitment to achieving one.
• We need capability aligned to SFIA responsibility level 4, working with autonomy, influence and appropriate complexity.
• We need United Kingdom work authorisation.

• We investigate, contain and resolve cyber security events and incidents, escalating where appropriate and completing root cause analysis for significant or recurring issues.
• We design, implement and maintain proportionate security controls across Microsoft 365, Azure, endpoint, network and cloud environments.
• We assess security risks arising from new services, projects and changes, and provide clear remediation advice through change and CAB processes.
• We manage vulnerability activities, including assessment, prioritisation, reporting, remediation tracking and validation.
• We ensure the maintenance of security configurations, appliances and platforms through appropriate patching, upgrades and lifecycle management.
• We create and maintain cyber security-related operating procedures, security baselines, technical standards, architecture records and customer-facing documentation.
• We support security governance and compliance activities, including risk assessments, policy development, control implementation, evidence gathering and audits for frameworks such as ISO 27001 and Cyber Essentials.
• We monitor relevant threats and emerging technologies, assess their impact on our business and customers, and coordinate appropriate action.
• We provide trusted technical security consultancy to customers and internal teams, translating technical risks into clear, business-focused recommendations.
• We produce accurate security reports, service metrics and compliance information for internal…