Principal Security Design Consultant

Right across infrastructure, there s a requirement to not only maintain, but also renew and reimagine. Whatever stage you re at in your career, with us you ll have an opportunity to grow and develop. Delivering essential infrastructure services for life, while being safety first, and client and customer centric in a friendly, fun and respectful environment where you are encouraged to thrive. Where will you be working? You ll be joining Cyro Cyber, part of MGroup, a specialist cyber security consultancy founded in 2021 to help public sector and financial organisations protect their Critical Digital Infrastructure. While Cyro Cyber has grown in size, reach and expertise, its core purpose remains the same: delivering trusted, independent cyber security advice and services to keep clients safe in an ever-evolving threat landscape. Cyro Cyber operates across the UK, with offices in London and Farnborough, working on high-impact, mission-critical projects that really matter. Want to come and be a part of it? What will you be doing? As Principal Security Design Consultant, you'll lead the design and transformation of Security Operations Centre (SOC) capabilities, helping clients enhance their cyber defence, monitoring, and incident response functions. You'll assess current environments, define future-state architectures, and deliver solutions across Microsoft Sentinel, Defender XDR, SIEM, SOAR, and protective monitoring platforms. Working closely with stakeholders, you'll translate business, risk, and regulatory requirements into secure, practical solutions across cloud, hybrid, identity, network, endpoint, and data security environments. You'll provide technical leadership throughout delivery, overseeing migrations, integrations, and architectural assurance. In addition, you'll act as a trusted advisor to clients, lead workshops and design reviews, support pre-sales activities, and contribute to the development of innovative security services, methodologies, and best practices. What you ll bring: Substantial experience as a SOC Architect, Security Architect or senior technical consultant leading enterprise SIEM, EDR/XDR or protective monitoring transformations. Deep practical design experience with Microsoft Sentinel, Defender XDR and Defender for Endpoint, including Log Analytics, KQL, data connectors, analytics and automation. Full lifecycle delivery experience from discovery and HLD/LLD development through migration, testing, service transition and implementation assurance. Experience migrating from third-party EDR, SIEM or outsourced SOC services, including platforms such as CrowdStrike. Strong understanding of SOC operations, detection engineering, incident response, threat hunting and managed security service operating models. Broad enterprise security architecture capability across Azure and Microsoft 365, identity, network, endpoint, data protection and hybrid environments. Experience designing telemetry and integration patterns for complex environments, including retention, ingestion cost, access control and data residency considerations. Demonstrable leadership, stakeholder management, supplier management and client-facing consulting skills. Experience delivering significant work outcomes within complex, regulated or high-availability enterprise environments. Eligibility for UK Security Clearance (successful appointment will be subject to being granted Security Clearance). What s in it for you? We offer a range of benefits designed to support your life in and out of work, some of which include; Matched or contributory pension scheme Online GP service, 24 hours a day, 365 days a year Employee assistance programme My Rewards portal, access to 1000 s of retail discounts Life assurance Enhanced maternity, paternity leave and adoption leave Reward and recognition scheme In addition, this role offers; My Car Choice our salary sacrifice EV/ Hybrid car scheme Private health care and health care cash plan for you Discretionary bonus schemes 26 days annual leave plus bank holidays Recommend a friend get rewarded for introducing people to us! About us We want to be an employer of choice and a great place to work, attracting diverse and talented people, who join us and make a difference. We re one of the Top 100 UK companies actively supporting and recruiting veterans. Our ENABLE inclusion networks bring together people who have a shared passion, to help create an environment where everyone belongs. Our values help to shape our culture and how we work with one another. We recruit with these values in mind, to ensure your aspirations, and ways of working, align with ours. We re responsible and go further for our people, clients, communities and the planet We re open and seek new and better ways of exceeding expectations We re together and as one team; the whole is greater than the sum of the parts We re ambitious and embrace opportunity, to lead essential infrastructure services for life Whether you re a trainee, apprentice or graduate, or progressing through your career, our people benefit from industry recognised programmes, training and development. It s an exceptional time to be a part of Cyro Cyber, a part of M Group. Please note: Occasionally, job adverts might be closed before the stated closing date. Do apply as soon as possible to ensure your application is considered. For certain roles, successful candidates will be subject to 3rd party background checks as part of the hiring process. Some roles require drug and alcohol testing as part of induction and onboarding. #MGroupG IND1