Cyber Security and Resilience Engineer in Oxford

The Cyber Security and Resilience Engineer will support our Cyber Security Operations strategy with the management and optimisation of the clients Threat protection and detection tooling. This role’s focus will be on ensuring there are robust security controls across web, email, endpoints and cloud environments. You will work closely with the Cyber Security Operations team, outsourced managed security service provider, and internal stakeholders to maintain and enhance our security posture. You will play a key role in our organisation.

Security transformation programme to help improve our security posture by securing our cloud and enterprise environments by implementing best practices. In this role, you’ll take ownership of managing and maintaining threat protection and detection tools, including web and email security solutions, EDR platforms, and cloud security technologies. You’ll configure and monitor Microsoft Defender for Endpoint, Office 365, and Cloud, while supporting the Security Operations Lead to keep our environment secure. Your day-to-day will involve analysing security alerts, collaborating with SOC and MSSP partners to strengthen detection and response, conducting regular assessments, and shaping security policies and best practices.

We operate a hybrid working policy that requires a minimum of 2 days per week in the office.

Responsibilities

In this role, you’ll take ownership of managing and maintaining threat protection and detection tools, including web and email security solutions, EDR platforms, and cloud security technologies. You’ll configure and monitor Microsoft Defender for Endpoint, Office 365, and Cloud, while supporting the Security Operations Lead to keep our environment secure. Your day-to-day will involve analysing security alerts, collaborating with SOC and MSSP partners to strengthen detection and response, conducting regular assessments, and shaping security policies and best practices.

About You

We’re seeking a cybersecurity professional with experience in Microsoft-centric environments, ideally within large or multi-region organizations. You should be a clear communicator and strong leader who sets direction, aligns teams, and focuses on priorities. Adaptability is key - you can manage change, make decisions with incomplete information, and handle uncertainty confidently. The ability to identify critical tasks, remove obstacles, and keep teams focused on results is essential.

To be successful in this role, you will ideally have/be:

• Demonstrated hands on experience in Azure, Entra and Microsoft 365 Cloud Security Engineering
• Demonstrated hands on experience of writing complex PowerShell scripts
• Experience of managing security of IAAS, PAAS and SAAS platforms
• Strong understanding of threat detection, prevention, and response methodologies.
• Hands-on experience with EDR, email security, and web security solutions.
• Microsoft certifications such as SC-200 MS Security Operations Analyst or AZ-500 Azure Security Engineer Associate
• Knowledge of cloud security principles and technologies
• Strong understanding of security frameworks (NIST, ISO 27001, Mitre ATT&CK)
• Knowledge of web security tooling such as web proxy, DNS filtering and similar (e.g. Cisco Umbrella)
• Previous experience as a Security Analyst or in a SOC environment.

Benefits

We care about work/life balance here. With this in mind we offer 25 days’ holiday that rises with service, plus bank holidays and Christmas closure (3-days) and a 35-hour working week. We are open to discussing flexibility in respect to working patterns, dependent on role. We also have a great variety of active employee networks and societies.

We help make your money go further by contributing to your pension up to 12%, offering loans and savings schemes through our partnership with Salary Finance, in addition to travel to work schemes and access to a wide range of local discounts. This role comes with the added benefit of a discretionary annual payment.