Cyber Security Engineer

Provide hands-on technical cyber security expertise to protect the resilience and secure operation of UK’s IT, OT, applications, infrastructure and digital services. The role is the local interface with central and Group Cyber Security (SOC, CERT, specialist teams), making sure central policies, standards and controls are implemented locally., * Engineering and operations: Act as local technical SME for IT and OT. Implement, operate and improve security controls across EDR, IAM, MFA, PAM, network segmentation, email, cloud, monitoring/logging, vulnerability management and device controls. Work with infrastructure, application, cloud and network teams to harden systems.

• Vulnerability management: Support the end-to-end process across IT and, where appropriate, OT. Review findings, coordinate risk-based remediation with asset owners, validate fixes, support patching and hardening, and manage security exceptions.
• Incident management: Be the local technical interface with SOC/CERT. Support investigation, containment, recovery and lessons learned, and take part in incident exercises and resilience testing.
• OT / ICS security: Work with plant and engineering teams on IT/OT segregation, secure remote access, legacy-system risk, asset visibility and monitoring, applying IEC 62443 and the NCSC CAF.

• Hands-on cyber engineering in a medium or large, technically complex organisation.
• Implementing enterprise security controls.
• Vulnerability management and remediation.
• Supporting incident investigation and remediation.
• Working with infrastructure, network, cloud, identity and application teams.
• Security review of technical solutions.
• Turning policy into technical controls.
• Working with centrally provided cyber services.