Cyber Security Engineer

Cyber Security Engineer

Barbican, London | Hybrid Working (One office day a week) | Fixed‑Term Contract until end of 2026 | Full‑Time

Competitive salary available, depending on experience. 37.5 hours per week.

We are looking for a skilled and enthusiastic Cyber Security Engineer to join our growing Cyber Security practice.

The ideal candidate will have previous experience working in an in‑house security engineering role collaborating within Technology Service and Product Engineering teams to build and maintain a strong security posture; mitigating security risks and fostering a proactive culture.

This role also provides the opportunity to contribute to the ongoing improvement of our cyber security detection and protection strategy.

Key Responsibilities

• Contribute to security architecture decisions for new services, platforms, and third‑party integrations.
• Manage and mature controls across Microsoft Defender for Cloud, Defender for Endpoint, Defender for Identity, and Defender for Office 365.
• Operate and improve Azure security services including Microsoft Entra ID (conditional access, PIM, identity protection), Azure Policy, and Defender for Cloud Apps.
• Support infrastructure teams with secure configuration of Azure landing zones, networking (NSGs, Azure Firewall, Private Endpoints), and Iaa S/Paa S workloads.
• Develop and maintain security‑as‑code artefacts (ARM/Bicep templates, Terraform modules, Azure Dev Ops pipelines with security gates).
• Support the development and testing of incident response playbooks and contribute to tabletop exercises.
• Provide guidance and uplift to colleagues on security best practice within the Microsoft ecosystem.

Qualifications & Experience

• Proficiency with security tooling, analytics tuning and reporting (e. g.

Anti‑virus, Microsoft Sentinel SIEM, endpoint XDR, cloud & network) and confidence in writing SIEM queries.

• Demonstrable hands‑on experience with Microsoft Sentinel, including KQL, analytics rules, and SOAR playbooks.
• Strong working knowledge of the Microsoft Defender suite (Endpoint, Identity, Office 365, Cloud Apps, Defender for Cloud).
• Solid understanding of Azure security architecture: Entra ID, RBAC, conditional access, Azure networking, and cloud security posture.
• Experience with LAN, WAN, Wireless and Firewall technologies.
• Experience working with Privileged Access Management and application control solutions.
• Experience with vulnerability management in a Microsoft environment.
• Ability to investigate and respond to security incidents, including log analysis and forensic triage.
• Familiarity with security frameworks relevant to a UK healthcare organisation, such as NIST CSF, CIS Controls, or Cyber Essentials Plus.
• Good written and verbal communication skills – able to convey technical risk clearly to non‑technical stakeholders.

Benefits

Our benefits package includes fitness, lifestyle, health and wellbeing rewards such as free gym membership, health assessments, retail discounts and pension options.

#J-18808-Ljbffr