Cyber Security Engineer

Our client is seeking a hands-on Cyber Security Engineer to help deliver the Cyber Security Roadmap and improve the security posture of our technology estate. This role will focus on implementing, configuring, maintaining and continuously improving security tooling and controls across OFG, with a particular emphasis on Microsoft 365, endpoint security, identity, productivity tools and wider infrastructure security.

You will play a key role in strengthening cyber security across the business by:

• Delivering technical cyber security projects from the Cyber Security Roadmap, ensuring new controls and capabilities are implemented effectively and handed over into BAU operation.

• Configuring, maintaining and improving OFG’s security tools, including Microsoft Defender, Microsoft Intune, Entra ID, Microsoft 365 security and compliance capabilities, endpoint protection, vulnerability management and other security platforms.

• Identifying opportunities to harden systems, reduce risk, improve secure configuration, automate repeatable tasks and strengthen the overall resilience of the OFG technology estate.

Working closely with the Cyber Security Operations Manager, Group Head of Cyber, wider IT teams and external partners, you will help translate security requirements into practical technical controls. You will support project delivery, operational security activities, security improvement initiatives, incident remediation and the ongoing maintenance of secure configurations across the estate.

This is a practical engineering role for someone who is comfortable working across Microsoft cloud security, endpoint management, security monitoring, vulnerability remediation and infrastructure hardening. You will be expected to maintain awareness of the changing threat landscape and proactively recommend improvements that reduce cyber risk across the business., * Deliver assigned technical work packages from the Cyber Security Roadmap, ensuring activities are planned, implemented, tested, documented and transitioned into BAU support.

• Implement, configure and maintain security tooling across the OFG estate, including Microsoft Defender, Microsoft Intune, Entra ID, Microsoft 365 security and compliance features, endpoint security, vulnerability management and related platforms.
• Identify, assess and deliver practical security improvements across devices, identities, applications, productivity tools, cloud services and infrastructure.
• Configure and harden Microsoft 365, Entra ID, Intune and Defender capabilities in line with security best practice, risk priorities and agreed standards.
• Support BAU security operations by maintaining security tooling, reviewing alerts, improving detections, remediating weaknesses and ensuring security controls continue to operate effectively.
• Work with IT teams to remediate vulnerabilities, configuration weaknesses, insecure defaults and gaps identified through security monitoring, assessments, audits or incident reviews.
• Support security incidents by providing technical investigation, containment, remediation and evidence gathering where required.
• Produce and maintain technical documentation, configuration standards, operational procedures, implementation notes and support handover materials.
• Provide practical security advice to IT colleagues and project teams, helping ensure security requirements are considered during design, implementation and change activities.
• Support the maintenance of cyber security accreditations, standards and frameworks relevant to the business, including Cyber Essentials, Cyber Essentials Plus, CIS Controls.
• Contribute to continuous improvement by identifying opportunities to automate repeatable tasks, improve monitoring, reduce manual effort and increase the maturity of security operations.

• Practical experience administering, configuring or improving Microsoft 365 security controls.
• Experience with Microsoft Defender capabilities, such as Defender for Endpoint, Microsoft 365 Defender, alert investigation, advanced hunting or device security improvement.
• Experience supporting vulnerability management activity, including assessing findings, prioritising remediation, tracking progress and improving secure configuration.
• Experience in security monitoring, alert triage, incident support or technical investigation, with the ability to act as an SME who junior members can escalate to.
• Someone who has good analytical and problem-solving skills, with the ability to investigate issues, identify root causes and recommend practical, risk-based improvements.
• Is confident working with IT colleagues, project teams and suppliers to deliver secure technology change, explain technical risks clearly and support agreed remediation activity.
• Someone organised, detail-focused and able to balance project delivery, BAU security activity and urgent remediation work in a busy environment.
• Ideally have relevant certifications such as Microsoft Security Operations Analyst Associate, Microsoft Azure Security Engineer Associate, CompTIA Security+, CISSP, SSCP or equivalent practical experience.

Planet Recruitment acts as an employment agency for permanent recruitment and an employment business for the supply of temporary workers. Planet Recruitment is an Equal Opportunities Employer.