Cyber Security Engineer in London

We are Genomics England, a global leader in enabling genomic medicine and research, building on the 100,000 Genomes Project and supporting the NHS's national whole genome sequencing service and the National Genomic Research Library. Our mission is to provide the evidence and digital systems so genomics can play a role in up to half of all healthcare interactions by 2035, helping the UK lead in genomic innovation.

We offer a salary from £78,850, 30 days holiday plus bank holidays, blended and flexible working, enhanced family leave, a defined contribution pension, learning and development support, recognition schemes, and a range of health and wellbeing benefits. We are committed to equity, diversity, and inclusion, and we aim to remove barriers in our recruitment process and support any adjustments needed.

Requirements

• Hands-on experience monitoring, detecting, analysing, investigating, and responding to cyber security threats.
• Strong understanding of cyber security operations and incident response, including root cause analysis and post-incident review activities.
• Experience working with SIEM and SOAR platforms, including alert analysis, detection tuning, and response automation.
• Experience performing threat hunting and integrating threat intelligence into operational security activities.
• Practical experience with cloud security concepts and services, particularly within AWS environments, including logging, telemetry, native security controls, and common attack patterns.
• Experience improving security operations through automation and configuration-as-code approaches.
• Familiarity with Infrastructure-as-Code and CI/CD tooling, such as Terraform and GitLab CI/CD, with the ability to review and influence security controls within engineering workflows.
• Experience working within DevOps or squad-based delivery environments, collaborating closely with engineers and architects.
• Strong communication skills, with the ability to explain security issues clearly to both technical and non-technical audiences, particularly during incidents.
• Relevant cyber security, cloud security, or incident response certifications may be beneficial.

Responsibilities

• Detect, analyse, and respond to cyber threats across our sensitive technology and data environment at national scale.
• Improve the controls, tooling, and processes that enable effective security operations.
• Work closely with Platform Engineers, Cloud Engineers, and Architects to ensure security controls are observable, resilient, and effective by design.
• Enhance security monitoring and alerting capabilities and improve detection logic.
• Support incident response through technical investigation and root cause analysis.
• Perform hands-on cyber defence activities, including security event analysis, threat hunting, and incident response.
• Work with logs and telemetry across cloud, platform, and application layers to identify genuine threats and support timely response actions.
• Automate workflows, integrate security tooling into engineering processes, and improve operational efficiency through scripting and configuration-as-code approaches.

Technologies

• AWS
• CI/CD
• Cloud
• DevOps
• GitLab
• Support
• Security
• Terraform