Cyber Security EngineerLocation: On-siteType: PermanentA well established organisation is looking for a Cyber Security Engineer to join its on-site IT function. This role sits within security operations and will suit someone who enjoys a hands-on mix of monitoring, incident response, Microsoft 365 security, vulnerability management, hardening, and operational security improvement.You'll be involved in investigating security events across on-prem, cloud, and hybrid environments, supporting remediation activity, improving controls, and helping drive strong day-to-day cyber operations across the business.What you'll be doing:Monitoring and investigating security events across SIEM, EDR/XDR, AV, Microsoft 365 security tools and wider infrastructureResponding to incidents, carrying out root cause analysis, and supporting containment and remediationManaging and improving Microsoft security controls across Defender, Conditional Access, MFA, Entra ID, identity protection and device complianceTracking vulnerabilities through to closure and supporting patching, hardening, and baseline enforcementSupporting governance, risk, and compliance activity including policy improvement, audit evidence, and risk assessmentsWorking within ITIL-aligned incident, problem, change, and request processesProducing clear SOPs, runbooks, procedures, and operational documentationWorking with network teams on firewalls, VPNs, proxies, segmentation, and network security reviewsWhat they're looking for:5+ years in cyber security engineering or operationsStrong experience across Microsoft 365 security technologies including Defender, Conditional Access, MFA, and Entra IDHands-on exposure to SIEM, EDR/XDR, vulnerability management, patching, and cloud securityGood understanding of incident response, threat investigation, and operational security processesExperience with PowerShell or Python for scripting and automationSolid grounding in network security concepts including firewalls, VPNs, IDS/IPS, DNS, and TCP/IPFamiliarity with ISO27001, GDPR, and audit or compliance supportStrong communication skills, documentation standards, and a methodical approachDesirable certifications:CISSP, CISM, CEH, SC-200, SC-300, SC-400, AZ-500, MS-102, ITIL Foundation
#J-18808-Ljbffr