Senior Cyber Security Engineer

As the Senior Cyber Security Engineer, you will be responsible for protecting and strengthening Kingspan Insulation’s global security posture across all IT systems, networks, and cloud environments. The Senior Cyber Security Engineer is responsible for monitoring, investigating, and resolving cyber security incidents, vulnerabilities, and threats in line with agreed service levels. The role ensures timely responses to alerts, escalations, and major incidents while proactively assessing the security health of servers, endpoints, and critical services. A key focus is identifying risks and implementing remediation measures to protect the confidentiality, integrity, and availability of the organisation’s infrastructure.

In addition to operational duties, the role contributes to the design and delivery of major security and IT transformation projects - strengthening technical controls, improving resilience, and enhancing overall cyber defence capabilities. The position is based at the head office in Pembridge, Herefordshire and requires international travel to Kingspan Insulation sites to support local security initiatives and maintain consistent security standards globally.

Responsibilities:

• Liaise with Kingspan Group to develop, implement, and maintain a robust cyber security posture for the Division.
• Work proactively with the business to ensure strong preparedness against cyber incidents, including promoting cyber security awareness across the organisation.
• Perform daily Qualys vulnerability scans, analyse results, prioritise risks, and implement or coordinate remediation activities.
• Monitor, investigate, and resolve Cyderes‑generated security tickets on a daily basis.
• Conduct daily security vulnerability checks and elevate or remediate findings as required.
• Investigate and analyse cyber events originating both within and outside the division to maximise lessons learned and strengthen future defences.
• Deliver ongoing cyber security training and awareness initiatives to improve organisational resilience.
• Provide monthly cyber security updates at internal security meetings and contribute to planning and risk discussions.
• Lead and coordinate yearly cyber security tabletop exercises across the company to test readiness and response capabilities.
• Perform yearly certificate checks and maintain certificate lifecycle management to ensure system integrity and availability.
• Oversee daily antivirus performance, updates, alerts, and remediation to maintain endpoint protection coverage.
• Provide out‑of‑hours support, either as part of a rota or on an ad hoc basis, when required to meet business needs.

What we are looking for:

• Experience in a similar role.
• Worked in an enterprise environment.
• Ability to handle difficult and demanding customer environments and pressurised workload.
• Advanced knowledge of security tooling.
• Advanced knowledge of key infrastructure platforms and tools: AWS, Azure, Active Directory, Citrix, VDI, Microsoft Server 2012/2016, Office 365 and Exchange Online.
• Working knowledge of Windows and Linux Operating systems.
• Experience in vulnerability management.
• Strong understanding of WAN, Cisco LAN and WLAN networking concepts.
• Strong analytical skills.

Whilst not essential, the following would be of benefit:

• Prince 2 Foundation.
• ITIL qualified.
• PowerShell scripting skills.
• Experience of managing VPN technologies.
• Experience of using antivirus applications.
• Pen test experience.
• Cloud security concepts i.e. Azure and AWS.
• Table top exercises.

What we can offer you:

• Competitive salary range.
• 25-days annual leave plus.