Cyber Security & Infrastructure Engineer

• Monitor security alerts, investigate potential incidents and lead incident response activities
• Conduct forensic investigations and contribute to threat detection and intelligence activities
• Develop and refine security monitoring, detection rules and use cases
• Carry out vulnerability scanning and support remediation and patch management
• Contribute to penetration testing and application security testing
• Secure and maintain Microsoft Azure cloud environments
• Implement and maintain Identity and Access Management (IAM) solutions
• Support the security of Microsoft 365, Exchange Online and Intune environments
• Ensure infrastructure and applications align with appropriate security standards and best practice
• Work with frameworks and standards including Cyber Essentials, ISO 27001, SOC 2, GDPR and NCSC guidance
• Apply security principles across network infrastructure, applications and systems
• Monitor and improve system resilience, performance and operational integrity
• Support log management, archiving and retention processes
• Develop and maintain security documentation, procedures and operating standards
• Provide technical guidance and security awareness support to colleagues
• Work closely with third-party suppliers to maintain and improve security standards
• Participate in an IT technical on-call rota
• Take a lead role during major or high-pressure incidents, providing both technical direction and clear stakeholder communication

Technologies:

• API
• Azure
• Cloud
• IAM
• Support
• ITIL
• Linux
• Microsoft 365
• Network
• OWASP
• SQL
• Security
• TCP/IP
• Unix
• WAF
• Web
• Windows
• Office 365

• A qualification in Cyber Security, Information Technology, Computer Science or a related discipline
• Commercial experience working in a cyber security or infrastructure security role
• Strong knowledge of Microsoft-based environments, including Microsoft 365, Exchange Online and Intune
• Practical experience with Microsoft Azure and Azure virtual infrastructure
• Strong understanding of network security, including TCP/IP, DNS, VPNs and network segmentation
• Experience securing both on-premises and cloud environments
• Knowledge of Windows and Linux/Unix security
• Understanding of IAM, encryption, PKI and TLS
• Knowledge of web security principles, including OWASP Top 10, WAF and API security
• Experience with vulnerability management, patching and security remediation
• Knowledge of the MITRE ATT&CK Framework and common attack techniques
• Experience applying security standards such as NCSC guidance, CIS benchmarks or Microsoft Security Baselines
• Understanding of data classification, secure storage and access controls
• Experience working within an ITIL-aligned environment
• Strong networking and troubleshooting skills
• Experience with scripting, automation or infrastructure-as-code would be advantageous
• Knowledge or experience of Microsoft SQL Server would be beneficial

Our client is a well-established organisation with a strong focus on technology, operational resilience and customer service. We are growing our IT function and are looking for an experienced Cyber Security & Infrastructure Engineer to join our team. This is a hands-on, permanent, on-site role in North East England, offering competitive salary and benefits, professional development and ongoing learning opportunities, and the chance to work across cyber security, infrastructure, cloud, threat detection and incident response within a small, technically capable IT team. We offer exposure to Azure, Microsoft 365, cloud security and hybrid infrastructure, a collaborative and supportive IT team, and the opportunity to influence and improve our cyber security posture.