IT Cyber Security Specialist / Cyber Security Engineer

Global Law Firm seeks an experienced IT Cyber Security Specialist to join its Infrastructure Engineering team, supporting and continually improving cybersecurity across a global IT environment.

Tasks

• Continuously review and improve the firm’s cybersecurity posture from an infrastructure perspective and external security rating.
• Identify, assess and remediate vulnerabilities across hardware, software and infrastructure (Windows Server and Azure Cloud).
• Monitor emerging threats and lead or support Incident Response investigations and mitigation.
• Evaluate, test and recommend security enhancements, controls and threat prevention technologies.
• Identify security risks and exposures and develop measures to prevent future incidents.
• Lead CE+ accreditation and support security, risk and data protection requirements from a technical (Not GRC) perspective.
• Participate in and lead infrastructure lifecycle, security and technology projects.
• Provide 3rd Line / Major Incident support as a cybersecurity subject matter expert.
• Work with third-party suppliers and advise internal technical teams on security measures to resolve security and infrastructure issues.

• Extensive experience in a similar role blending Cyber Security with core Wintel Infrastructure and Azure cloud engineering.
• Strong knowledge of modern security architecture, threat prevention techniques and incident response.
• Strong Windows Server 2016/2019/2022 knowledge including Active Directory, DNS, DHCP, Intune, Group Policy, PKI, Entra and Azure SSO.
• Demonstrable experience across Cyber Security, Incident Response, Threat Monitoring and Vulnerability Management using tools such as MS Sentinel, MS Defender etc for threat hunting, vulnerability monitoring and security posture improvement.
• CISSP, CEH, CCNA Security, SC-100, SC200 or equivalent security certification.
• Experience designing, integrating and managing complex infrastructure and cloud solutions from a cyber security standpoint and advising technical infrastructure teams on security focussed designs and operations.
• Strong communication skills with the ability to explain complex security issues to technical and non-technical audiences.
• Experience working with third-party providers across on-premise and cloud services.
• Strong planning skills and knowledge of ITIL processes and best practice.