Cyber Security Specialist

As a Cyber Security Specialist, you'll own our Cyber Essentials work stream, delivering Cyber Essentials and Cyber Essentials + projects to our customers. A meticulous attitude towards high quality security hygiene and best practices, with exceptional cyber security knowledge you'll excel in this role. When you're not managing our Cyber Essentials projects, you'll deliver secure by design Microsoft infrastructure and cloud solutions to our customers, grounded in our technical baselines, Microsoft security best practice, and the Cyber Essentials control set.

You'll also lead implementations across Microsoft 365, Windows Server, Azure and virtual networking. Placing identity, endpoint protection, secure configuration, patching, logging, and incident readiness at the heart of every deployment.

Secure solution design & delivery (Microsoft 365 - Modern Work)

• Lead deployments of Microsoft infrastructure and cloud solutions, ensuring security is designed‑in, not bolted on.
• Produce and maintain secure build documentation: HLD/LLD, as‑built packs, security baselines, rollback plans.
• Implement and optimise:
  • Entra  (Azure AD), MFA/Conditional Access, identity governance
  • Intune / Endpoint Manager device compliance & hardening
  • Microsoft Defender (Endpoint, Office 365, Identity, Cloud Apps)
  • Secure email posture (anti‑phishing, SPF/DKIM/DMARC, safe links/attachments)
  • Azure security controls (where applicable): RBAC, PIM, Key Vault, policy/guardrails

Cyber Essentials (CE) aligned delivery & assurance

• Secure configuration (servers, endpoints, Microsoft 365)
• User access control (least privilege, role‑based access, joiners/movers/leavers)
• Malware protection (Defender and layered controls)
• Security update management (patching cadence + reporting)
• Firewalls & boundary controls (including VPN where applicable)
• Support readiness for CE Plus style evidence gathering (device samples, screenshots, policy evidence, implementation proof).

Customer engagement & enablement

• Run technical workshops, translate risk into plain English, and guide customers through secure adoption.
• Provide security‑focused handover/training sessions for IT admins and end users.

Project transition, quality & continuous improvement

• Own QA & renewals for your implementations: validation checklists, control testing, documented outcomes.
• Ensure clean handover to project management and support desk functions, including relevant operational security guidance.
• Feed back improvements into HBP baselines using lessons learned and emerging Microsoft security features.

Typical Projects

• Deliver multiple project baselines (typically 10‑25 days) across varied customer environments, often 50‑100 users, multi‑site and VPN enabled.
• Work with project managers to plan resources, milestones, risks and security dependencies.
• Provide clear customer updates; challenge unachievable timelines with constructive options.
• Produce high‑quality documentation and communicate effectively to technical and non‑technical stakeholders (including C‑suite).
• Mentor junior engineers and contribute to onboarding.

Measurable Outcomes

• Projects delivered on time, within budget, with positive customer effort feedback.
• Security baselines applied consistently (with evidence) and aligned to Cyber Essentials.
• Clear, complete handover packs including operational security guidance and monitoring recommendations.
• Continuous development: new Microsoft Security capabilities adopted into delivery standards.

Additional Security Focus Areas

• Cloud security:
  Microsoft Defender for Cloud/Purview Suite/Cloud Apps (where applicable), Azure guardrails.
• Security operations readiness: logging, alerting, audit trails, incident runbooks.
• Backup & DR: secure backups, immutability where possible, recovery testing.
• Documentation: clear auditable customer security deviation tracking.

Why work for us?

Here at the HBP Group we are passionate about our business and our customers, and believe our people are our greatest asset. Driven by our commitment to creating a great place to work for all our staff, we are always looking for ways to improve our employee experience. We are a living wage foundation employer, pay the Real Living Wage and are working…