Cyber Security Engineer
The Cyber Security Engineer joins our client’s Proactive Security team, focusing on developing security technology stacks to ensure threat mitigation through offensive and preventive measures. The role offers the opportunity to work within a high-calibre security environment dedicated to safeguarding information assets.
Our client is a leading financial institution committed to protecting its infrastructure and client data through innovative security solutions. The organisation values proactive risk management and employs advanced security technologies to stay ahead of emerging threats.
Role Overview
The Cyber Security Engineer will develop and maintain threat models, assess security controls, and build tools for proactive detection, configuration drift monitoring, and automated remediation. You will be responsible for managing SIEM systems, developing use cases, and refining security monitoring practices. Ensuring the integrity and performance of security infrastructure and collaborating closely with incident response teams to detect and respond to threats are key components of the role. Success hinges on delivering robust security solutions and continuously improving detection capabilities and operational procedures.
Key Skills & Experience
- Develop and maintain threat models for information assets and services.
- Build and optimise security tools for detection, remediation, and orchestration.
- Design, implement, and maintain SIEM workspaces and develop custom queries for threat hunting and incident investigation.
- Develop, test, and deploy advanced threat detection use cases based on vulnerability insights.
- Analyse security controls and collaborate with the SOC team to enhance detection logic.
- Provide security guidance on application and infrastructure protection.
- Automate security tasks using scripting languages such as PowerShell and Python.
- Manage security infrastructure related to privileged access, session management, and cloud security principles.
Requirements
- Right to work in the UK.
- Proven experience with SIEM (implementation, configuration, custom rule creation).
- Minimum of 5+ years in Security Engineering, Security Automation, or similar roles.
- Extensive hands-on experience with EDR and SIEM technology stacks.
- In-depth knowledge of Active Directory security principles, Windows event collection, and network security.
- Proficiency in scripting (PowerShell, Python).
- Familiarity with cloud security principles in Azure, GCP, and AWS.
- Knowledge of operating systems including Windows Server and UNIX variants.
- Industry certifications such as AZ-500, SC-200, SC-900, or similar.
- On-site based in the UK, working in a hybrid environment.
If you have the relevant skills and experience, please apply with an updated CV.
