Senior Cyber Security Engineer
Full TimeJob Overview
The Senior Cyber Security Engineer is responsible for the design, implementation, management, and continuous improvement of the organisation’s cyber security controls across on-premise and cloud environments.
The role will lead the operational security capability, ensuring robust protection of infrastructure, data, and services in a regulated financial services environment. The successful candidate will have deep technical expertise across Microsoft security technologies, network security, threat detection and response, and regulatory security frameworks.
Key Responsibilities
Security Architecture & Engineering
- Design and implement security controls across complex hybrid architectures (on-premise and Azure cloud environments).
- Lead security configuration and hardening across Azure and Microsoft 365, including full utilisation of E5 Security and Defender suite capabilities.
- Implement and manage Microsoft Defender XDR solutions.
- Develop and maintain secure network architectures including segmentation and Zero Trust principles.
Threat Detection & Response
- Manage and optimise Azure Sentinel (Microsoft Sentinel)
- Manage and tune Darktrace NDR.
- Support incident detection, investigation, and response processes.
Vulnerability & Risk Management
- Manage vulnerability assessment and remediation processes using Tenable Nessus and Microsoft Defender.
- Conduct vulnerability scanning, reporting, and remediation tracking.
- Contribute to risk assessments aligned with NIST and regulatory frameworks.
Data Security & Compliance
- Implement and manage Microsoft Purview
- Support Cyber Essentials Plus compliance activities.
- Assist with internal and external security audits.
- Ensure security controls meet regulatory requirements in a fast-paced, regulated environment.
Network & Infrastructure Security
- Implement and manage security controls
- Support network automation initiatives where appropriate.
- Work across various Linux distributions
Automation & Reporting
- Develop automation using Azure Logic Apps and related tools.
- Create dashboards and reporting using Power BI or similar technologies.
- Continuously improve security operations through automation and optimisation.
Skills, Knowledge and Expertise
- Strong technical understanding of security controls required to secure complex hybrid architectural solutions.
- Extensive experience managing security within Azure and Microsoft 365 environments, including E5 Security suite.
- Hands-on experience with; Microsoft Sentinel, Defender XDR, Darktrace NDR, Microsoft Purview (DLP and data classification), Palo Alto NGFW and Panorama
- Proficiency in Kusto Query Language (KQL).
- Experience integrating diverse security log sources into SIEM platforms.
- Strong understanding of vulnerability management tools including Tenable Nessus and Microsoft Defender.
- Experience implementing and managing network security technologies (Firewall, IDS, WAF, segmentation).
- Experience with enterprise datacentre networking environments.
- Working knowledge of multiple Linux distributions.
- Experience working within the NIST Cybersecurity Framework.
- Experience supporting Cyber Essentials Plus accreditation.
- Demonstrable experience operating in a regulated environment (e.g., financial services).
- Experience with Azure Logic Apps and security automation.
- Experience with Power BI or similar reporting tools.
- Network management and automation experience desirable.
- Recognised Microsoft Security certifications