Cyber Security Engineer

We’re looking for a hands-on Cyber Security Engineer to help strengthen the security of our technology estate and deliver key initiatives from our Cyber Security Roadmap.

You’ll play a key role in implementing, configuring and continuously improving security controls across our Microsoft-centric environment. This role offers the opportunity to work across Microsoft 365 security, identity and access management, endpoint protection, vulnerability management, infrastructure hardening and security operations.

You’ll help ensure our security capabilities remain effective, resilient and aligned to evolving threats while supporting both project delivery and day-to-day security operations., Security Engineering & Project Delivery

• Deliver technical work packages from the Cyber Security Roadmap, ensuring solutions are planned, implemented, tested and transitioned into operational support
• Implement, configure and maintain security tooling across the organisation
• Support the delivery of security improvement initiatives that reduce cyber risk and strengthen operational resilience
• Produce and maintain technical documentation, standards, implementation notes and support procedures

Microsoft Security & Infrastructure Protection

• Configure and enhance Microsoft Defender, Microsoft Intune, Entra ID and Microsoft 365 security and compliance capabilities
• Strengthen security across endpoints, identities, applications, cloud services and infrastructure
• Implement secure configurations and hardening standards in line with industry best practice
• Support vulnerability management activities, ensuring issues are identified, prioritised and remediated effectively

Security Operations & Incident Response

• Support day-to-day security operations, including monitoring, alert review and detection improvement
• Assist with cyber security investigations, incident response, containment and remediation activities
• Work closely with IT teams to address security weaknesses, vulnerabilities and configuration risks
• Help maintain key security controls to ensure ongoing effectiveness and compliance

Continuous Improvement & Governance

• Support the maintenance of security standards and accreditations, including Cyber Essentials, Cyber Essentials Plus and CIS Controls
• Identify opportunities to automate manual processes and improve operational efficiency
• Provide practical cyber security guidance to technical teams and project stakeholders
• Maintain awareness of emerging threats and recommend improvements to strengthen security capabilities, ou’ll be joining a growing organisation where you can make a real impact, working closely with senior stakeholders on strategic and high-value initiatives across the Group.

Our divisional brands include Acorn Education, Options Autism, Blenheim Schools, and Momenta Connect.

By joining our central teams, you’ll help shape strategy, provide expert support, and drive continuous improvement across a growing organisation renowned for quality, impact, and innovation. We value collaboration, professionalism, and creativity, offering the opportunity to influence change at scale while staying true to our core values of care, aspiration, and inclusion.

Essential

• Experience administering and improving Microsoft 365 security controls
• Hands-on experience with Microsoft Defender technologies, including Defender for Endpoint and Microsoft 365 Defender
• Experience supporting vulnerability management and remediation activities
• Knowledge of security monitoring, alert triage, incident response and technical investigation
• Strong analytical and problem-solving skills with a practical approach to risk reduction
• Experience working with technical teams and stakeholders to deliver secure technology solutions
• Strong organisational skills with the ability to balance projects, operational activities and security priorities
• Experience configuring or supporting security controls across cloud, endpoint and identity platforms

Desirable

• Microsoft Security Operations Analyst Associate certification
• Microsoft Azure Security Engineer Associate certification
• CompTIA Security+, CISSP, SSCP or equivalent certifications
• Experience supporting security frameworks and compliance initiatives
• Experience automating operational or security-related processes

Pulled from the full job description

• Company pension
• Cycle to work scheme
• Enhanced maternity leave
• Enhanced paternity leave
• Car scheme, * Life Assurance
• Pension scheme with flexible contribution options
• “Your Wellbeing Matters” - mental and physical health support
• Family Growth Support, including enhanced maternity and paternity leave
• Flexible benefits via Vista (Cycle to Work, Electric Car Scheme, discounts, critical illness cover, and more)

We are committed to safeguarding and promoting the welfare of children and young people. All applicants will be subject to social media checks and successful applicants to a fully enhanced DBS check.

We are an Equal Opportunities Employer.

We reserve the right to close the vacancy early if a high volume of suitable applications is received. Outcomes First Group is committed to a fair, thorough, and efficient recruitment process in line with Keeping Children Safe in Education. While we aim to keep applicants informed, we do not accept liability for any loss of earnings or costs incurred due to delays or changes in compliance processes. All stages are subject to safeguarding checks and statutory requirements, which may affect timescales.

Outcomes First Group is the UK’s largest independent provider of specialist education and care. We deliver personalised, research-led support that helps every child thrive.

As a growing organisation, we continue to invest in our people and services to deliver high-quality outcomes across our sites.