Cyber Security Engineer

An established organisation in the North East is seeking a proactive, hands-on Cyber Security Engineer to strengthen its security posture and lead day-to-day cyber protection across its systems, networks, and cloud environment.

As the organisation’s internal cyber security SME, you will have the opportunity to shape improvements and enhance resilience, working closely with colleagues across IT and the wider business.

This is a predominantly site based role so applicants must reside within a commutable distance of the office., Joining a close-knit and highly collaborative IT function, you will play a key role in protecting the organisation’s infrastructure while working as part of a small, multi-skilled team delivering day-to-day IT services. Alongside your cyber security responsibilities, you will support operational IT activity through the service desk, responding to tickets, assisting users, and contributing to the smooth running of Microsoft 365, Azure, infrastructure, and hybrid environments.

Working alongside IT colleagues and a third-party MDR provider, your work will combine security monitoring, incident response, continuous improvement, ticket-based support, and broader departmental requirements. This is a varied, hands-on role suited to someone who enjoys teamwork, shared ownership, and balancing cyber security priorities with the everyday needs of a busy IT department., * Monitor, investigate, and respond to security alerts and potential incidents, working closely with colleagues and the MDR provider.

• Lead security remediation activity on escalated MDR incidents, coordinating technical resolution and clear communication across the IT team and wider business.
• Develop and enhance threat detection rules and use cases in collaboration with internal stakeholders and third-party partners.
• Implement and maintain security controls across Microsoft 365, Azure, and hybrid infrastructure, ensuring changes are understood, documented, and communicated effectively.
• Support the day-to-day running of the IT department by handling service desk tickets, troubleshooting user issues, and assisting with infrastructure, desktop, and application support.
• Contribute to ticket triage, prioritisation, resolution, and escalation, helping maintain high standards of service and ensuring colleagues receive timely support.
• Support secure configuration, IAM, cloud environments, patch management, and application security testing as part of wider operational and improvement activity.
• Ensure compliance with standards such as Cyber Essentials, ISO 27001, SOC 2, and GDPR, working collaboratively to embed best practice into everyday IT processes.
• Play a key role during high-pressure incidents, supporting both technical resolution and stakeholder communication as part of a coordinated team.
• Collaborate with third-party suppliers to drive compliance with best practices, improve service quality, and support continuous improvement across IT operations.
• Participate in an IT on-call rota.

You’ll be an experienced, confident cyber security practitioner who is comfortable acting as the standalone specialist within a small team. You’ll bring a strong technical foundation and an ability to work across hybrid and legacy environments.

With a background in infrastructure or networking, you will possess:

• Strong experience with Microsoft-centric environments (M365, Azure, Intune, security baselines).
• Knowledge of compliance frameworks (NCSC guidance, Cyber Essentials), MITRE ATT&CK, encryption, IAM and secure configuration principles.
• The ability to manage operational workload while progressing ongoing improvement initiatives.
• Strong communication and stakeholder-engagement skills, making complex risks easy to understand.

A degree or cyber security certification is beneficial but not essential.

Applicants who currently undertake a broad infrastructure role that includes cyber security responsibilities looking to specialise in that area, are also welcomed.