Cyber Security Engineer

Our client are looking for an experienced Cyber Security Engineer to join their team on a permanent basis. You’ll help with strengthening the security of a broad technology environment and help embed effective security practices across a growing organisation. This role covers identity and access management, endpoint security, cloud platforms, business applications, vulnerability management and incident response. You will work closely with IT operations, development and platform teams, as well as selected external security providers., * Maintain and improve security controls across identity, endpoint, cloud and business application environments.

• Review authentication, access and administrative privileges, promoting least-privilege and zero-trust principles.
• Improve endpoint security, device compliance, secure configuration and protection against malicious activity.
• Work with IT operations to address security weaknesses in workplace technology and supporting infrastructure.
• Review cloud services and hosted workloads for security risks, configuration weaknesses and excessive access.
• Support development and platform teams in incorporating security into technical designs and delivery processes.
• Operate and improve the organisation’s vulnerability and exposure-management processes.
• Coordinate remediation activity with internal system owners and confirm that corrective actions are effective.
• Investigate security alerts and incidents, coordinating with internal teams and external security specialists.
• Maintain practical incident-response procedures, escalation routes and supporting documentation.
• Participate in incident exercises and post-incident reviews, ensuring that lessons result in measurable improvements.
• Review the security of SaaS applications, third-party integrations and data-sharing arrangements.
• Produce clear reporting on security risks, incidents, vulnerabilities and remediation progress.
• Support audits, customer assurance requests and relevant compliance activities.
• Develop technical security standards, operating procedures and guidance.

• 5 years of relevant experience in cybersecurity, infrastructure security, cloud security or a closely related technical role
• Practical experience securing enterprise identity, productivity and collaboration services.
• A good understanding of identity and access management, multifactor authentication, conditional access and privileged access.
• Experience securing and managing Windows endpoints through a modern device-management platform.
• Experience using endpoint detection and response, extended detection and response, or comparable security technologies.
• Practical experience assessing, prioritising and coordinating the remediation of vulnerabilities.
• Working knowledge of public-cloud security concepts, including identity, networking, logging, data protection and secure configuration.
• An understanding of common attack techniques and appropriate preventative and detective controls.
• Experience investigating security events or supporting incident response.
• The ability to evaluate technical findings and recommend proportionate, achievable improvements.
• The ability to write clear technical documentation, incident records and risk summaries.
• Strong communication skills and the ability to work effectively with technical and non-technical colleagues.

Desired experience:

• Experience working with an external security operations or managed detection and response provider.
• Experience implementing or improving a vulnerability-management platform.
• Familiarity with cloud-native security monitoring and configuration-management services.
• Experience securing SaaS applications and third-party integrations.
• Knowledge of email security, information protection and data-loss prevention.
• Experience using Scripting or automation to improve security operations.
• An understanding of network security and the protection of office-based technology.
• Experience supporting penetration tests, audits or security certification activities.
• Familiarity with recognised frameworks such as ISO 27001, Cyber Essentials, NIST CSF or CIS Controls.
• A relevant technical certification in security, identity, cloud or endpoint management.
• Experience introducing security checks into software-development and deployment processes.

Proactive Appointments Limited operates as an employment agency and employment business and is an equal opportunities organisation