> Markdown version of [/jobs/ext/1464207-cyber-security-engineer](https://www.wearedevelopers.com/jobs/ext/1464207-cyber-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Cyber Security Engineer

- **Company:** IDPP
- **Location:** Reading, UK
- **Salary:** £110,500.0
- **Contract:** Permanent contract
- **Skills:** Active Directory, Amazon Web Services, Microsoft Azure, Cloud Computing, Cyber Security, Python (Programming Language), Windows Servers, Windows PowerShell, Cloud Services, Zero Trust Network Access, Security Information and Event Management, Systems Integration, Google Cloud, QRadar, Azure Security Center, Cybercrime, Microsoft Sentinel, Cortex XSOAR Platform, Splunk, SentinelOne Expertise, Security Orchestration, Automation & Response, Servicenow
- **Published:** July 28, 2026
- **Apply:** https://www.totaljobs.com/job/cyber-security-engineer/idpp-job107756061

## About the Role

* Enterprise deployment of CrowdStrike Falcon
 * Falcon sensor rollout and lifecycle management
 * Policy creation and tuning
 * Host groups, prevention policies and detection management
 * Incident response and threat hunting using CrowdStrike
 * Falcon Complete, Falcon Insight or Falcon Prevent
 * Integration with Microsoft Sentinel, Splunk, QRadar or similar SIEM platforms
 * Active Directory integration
 * Enterprise-scale security engineering

Desirable Experience

 * Microsoft Defender for Endpoint (MDE)
 * SentinelOne
 * Rapid7
 * Carbon Black
 * Microsoft Sentinel
 * XSOAR or other SOAR platforms
 * Azure, AWS or GCP security
 * PowerShell or Python automation
 * Zero Trust or enterprise security architecture

## Description

We are supporting a major enterprise organisation with the rollout and optimisation of CrowdStrike Falcon across a complex technology estate and are looking for an experienced Cyber Security Engineer with proven, hands-on CrowdStrike implementation expertise.

This is an engineering-focused role, not a SOC Analyst position. We are looking for someone who has been responsible for deploying, configuring and enhancing CrowdStrike within large enterprise environments.

The Role

You'll join an established cyber security programme, taking ownership of CrowdStrike engineering activities across enterprise infrastructure, working closely with security, infrastructure and cloud teams.

Key responsibilities include:

 * Deploying and configuring CrowdStrike Falcon across enterprise environments
 * Managing CrowdStrike policies, sensor deployments and platform optimisation
 * Designing and implementing endpoint security controls
 * Integrating CrowdStrike with technologies including Active Directory, ServiceNow, SIEM and SOAR platforms
 * Developing detection rules, response workflows and security policies
 * Supporting threat hunting and improving endpoint visibility
 * Working across Windows server, desktop and cloud workloads
 * Providing technical expertise throughout implementation and operational phases


## Related Videos

- [Checkmate: 5 Real Incidents That Can End a Software Company](https://www.wearedevelopers.com/videos/100126-checkmate-5-real-incidents-that-can-end-a-software-company)
- [Applying Agile Principles to Incident Management ](https://www.wearedevelopers.com/videos/101-applying-agile-principles-to-incident-management)
- [Our journey with Spring Boot in a microservice architecture](https://www.wearedevelopers.com/videos/511-our-journey-with-spring-boot-in-a-microservice-architecture)
- [Robots are coming into the wild! Full-Stack Robotics Engineers, be ready!](https://www.wearedevelopers.com/videos/479-robots-are-coming-into-the-wild-full-stack-robotics-engineers-be-ready)
- [AI in Production: applied AI & enterprise use cases](https://www.wearedevelopers.com/videos/100130-ai-in-production-applied-ai-enterprise-use-cases)
- [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see)

## Related Articles

- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Dev Digest 162: AI careers, MCP, AWS best practices & floppy sweaters](https://www.wearedevelopers.com/magazine/571-dev-digest-162-ai-careers-mcp-aws-best-practices-floppy-sweaters)
- [Dev Digest 138 - Are you secure about this?](https://www.wearedevelopers.com/magazine/486-dev-digest-138-are-you-secure-about-this)
- [Dev Digest 216: CyberSec + Mythos, Stack Overflow for Agents & DOOM in TTF](https://www.wearedevelopers.com/magazine/728-dev-digest-216-cybersec-mythos-stack-overflow-for-agents-doom-in-ttf)