Senior Security Engineer

The Senior Security Engineer will report to the Information Security Operations Manager. The primary function of the role is to build and deliver security controls supporting critical Change initiatives including SIEM and PKI/BYOK integrations, Defender for Coud and Purview configuration. This is a hands-on engineering role suited to someone with strong Microsoft, Azure, cloud and enterprise security experience who can design, configure and improve security solutions across a complex environment. While the candidate should be familiar with security monitoring and incident handling, this role is not suited to someone whose experience is limited to those areas.

The successful candidate will be able to understand complex environments quickly, take ownership of technical delivery (often leading a small team), work effectively with IT; development and business teams and communicate technical risks and recommendations clearly. The role includes participation in incident, change and problem management, with some out-of-hours work required for planned change, maintenance or urgent security response., * Extensive hands-on cyber security engineering experience across IT security, network security, systems engineering or comparable enterprise environments.

• Strong Microsoft, Azure, Microsoft 365, cloud security, network architecture and hybrid environment security knowledge.
• Proven ability to design, configure, implement and improve security technologies, controls, tooling and processes.
• Experience with SIEM technologies, security monitoring, incident response, vulnerability management, patch compliance, server security and endpoint security.
• Ability to work independently, take ownership of technical deliverables and collaborate effectively with IT, Development and wider business teams.
• Clear communication, documentation and presentation skills, with the ability to explain technical risks and recommendations to technical and non-technical stakeholders.
• Proficiency with Windows, Linux, command-line tools and scripting languages such as PowerShell or Python.

Desirable

• Experience gained within a legal, financial services or similarly regulated organisation.
• Awareness of security frameworks and best practice including NCSC guidance, OWASP, NIST CSF, CIS Controls, ISO 27001, ISMS principles and GDPR.
• Experience with automation, security testing, forensic investigation activities, DLP monitoring, privileged access, key management or HSM infrastructure.
• Bachelor’s degree in Computer Science, Information Security or a related field, equivalent practical experience, or relevant security certification such as SANS, CISSP, ISACA, CEH or OSCP.

Skills

• SIEM and Security Operations
• SIEM Implementation & Management
• SIEM Platforms