Cyber Security Engineer

The Cyber Security Engineer will play an important role in protecting the digital infrastructure and information assets of Pennine Care NHS Foundation Trust. The post holder will be responsible for the technical operation and continual improvement of cyber security controls, taking a proactive approach to cyber defence and supporting the ongoing maturity of the Trust’s security posture. The role will involve monitoring, detecting, and responding to cyber security threats and vulnerabilities using a range of security tools, including endpoint protection, vulnerability management, threat prevention services, and network security controls. The Cyber Security Engineer will also analyse security data and contribute clear, meaningful reporting and recommendations to both technical and non-technical stakeholders.

The post holder will work closely with internal teams and third-party suppliers to ensure systems and services meet agreed security standards, while supporting risk management, audit activities, and compliance with NHS cyber security guidance. Ongoing professional development is essential, with the role requiring continued learning to remain effective against an evolving cyber threat landscape.

Provide expert cyber security advice on phishing, computer security and cyber-crime. Prioritise and triage tickets and alerts from national and local systems, escalating by severity.

Ensure compliance with frameworks including DSPT, Cyber Assurance, CareCERT, Cyber Essentials and NIS Regulations. Support completion of the Data Security and Protection Toolkit.

Lead penetration testing, vulnerability management and cyber risk assessments, developing mitigation strategies through analysis of complex and sensitive information.

Investigate security incidents using technical logs, threat intelligence, MITRE frameworks and known TTPs. Deliver incident response, recovery and reporting (e.g., ICO/NHS CSOC), ensuring lessons learned.

Deploy, maintain and troubleshoot systems including O365, SharePoint, email, security tools and platforms. Maintain anti-virus and ensure secure patching across infrastructure.

Develop and maintain SOPs, support control selection, risk assessments and gap analysis, contributing to a proactive, cost-effective and resilient service.

Provide training, supervision and specialist technical guidance. Support Digital Services with configuration and operational security.

Contribute to policy development (Data Security, Acceptable Use), interpret legislation and best practice, ensuring compliance with NHS Digital standards.

Manage competing priorities to meet deadlines and stay current on emerging threats, vulnerabilities and threat actors.

We are proud to provide high quality mental health and learning disability services, both inpatient and in the community across five boroughs of Greater Manchester - Bury, Oldham, Rochdale, Stockport and Tameside and Glossop.

Our vision is for a happier and more hopeful life for everyone in our communities and our staff work hard to deliver the very best care for the people who use our services. We’re really proud of our #PennineCarePeople and do everything we can to make sure we’re a great place to work.

Do you have experience in SharePoint?

Pulled from the full job description

• Annual leave
• Employee discount, If you come and work for us we will offer a range of benefits and opportunities, including:

Generous annual leave entitlement for Agenda for Change and Medical and Dental staff.

Flexible working opportunities to support your work/life balance

Access to Continued Professional Development

Involvement in improvement and research activities

Health and Wellbeing activities and access to an excellent staff wellbeing service

Access to staff discounts across retail, leisure and travel