Cyber Security Engineer, M365 Security, ISO27001, COR7671

A Cyber Security Engineer opportunity for someone with solid experience across the Microsoft 365 security stack (Intune, Defender, Entra, Purview, Copilot) has opened up with an established UK-based organisation looking to strengthen its technical security function. Could this be the role where you put your hands-on security expertise to work across a broad and varied remit, with genuine scope to make an impact?, The Cyber Security Engineer will sit at the heart of the Group IT Services function, taking ownership of day-to-day security operations alongside longer-term compliance and vulnerability management activity. You will monitor and respond to alerts and incidents, gather and act on threat intelligence, and manage the security ticket queue to ensure timely resolution. Beyond reactive work, you will conduct penetration testing, drive vulnerability remediation across the infrastructure and end-user estate, and maintain endpoint protection and identity and access management configurations. The Cyber Security Engineer will also play a key advisory role, contributing to change request approvals, project designs, and software deployment decisions from a security perspective, as well as maintaining compliance with ISO27001, CyberEssentials, and CyberEssentials+.

The Company

This is a well-established, mid-sized business operating across multiple entities in the UK. The organisation holds a range of recognised quality and security accreditations and has a mature approach to IT governance. The IT function is collaborative and commercially aware, and the Cyber Security Engineer will be working closely with a Chief Information Security Officer who takes a hands-on interest in the team.

• Commercial experience in a cyber security or security analyst role, ideally within an SME environment, with a solid grounding in basic infrastructure or system administration
• Hands-on knowledge of penetration testing and vulnerability scanning tools such as Tenable Nessus or Kali Linux, alongside experience of endpoint protection, identity and access management, and conditional access or mobile application management policies
• Practical experience with M365 security tooling including Intune, Defender, Entra, Purview, and Copilot for Security
• Familiarity with ISO27001, CyberEssentials, and CyberEssentials+, combined with an understanding of ITIL disciplines such as incident, problem, and change management

• 25 days holiday
• Pension
• Flexible working/working from home
• Amazing opportunities for training and progression