Cyber Security Engineer

Sword is a leading provider of business technology solutions within the Energy, Public and Finance Sectors, driving transformational change within our clients. We use proven technology, specialist teams and domain expertise to build solid technical foundations across platforms, data, and business applications. We have a passion for using technology to solve business problems, working in partnership with our clients to help in achieving their goals.

We are looking for a Cyber Security Engineer to join our security team and take the lead on our security operations. Reporting to the Group CISO and working closely with IT, you will take ownership of the day-to-day running of Sword's technical security controls, with a strong focus on Microsoft security technologies. You will play a leading role in strengthening monitoring, detection, protection, and response across the business, and in automating the work that should not be done by hand. This role suits someone with at least five years of hands-on experience, a positive can-do attitude, and the ability to take ownership, work autonomously, manage workload effectively, and deliver results.

This is a hands-on technical role with real ownership, focused on implementing, operating, and improving security controls across Sword's environment. Working with IT and the wider security function, you will strengthen monitoring, protection, detection, response, and technical assurance through effective use of security technologies and services, and you will look for opportunities to automate. We are looking for someone who is proactive, practical, and delivery-focused, with the confidence to work independently, agree and manage priorities, and follow through with minimal supervision.

Key responsibilities include:

• Security Monitoring and Operations: Own the day-to-day security operations across Microsoft security technologies including Microsoft Sentinel, Microsoft Defender, Conditional Access, Entra ID, and related Azure security capabilities, strengthening monitoring, detection, protection, and response.
• Vulnerability Management and Hardening: Proactive and risk-based vulnerability management, including attack surface reduction, system hardening, remediation support, and cloud security posture improvement.
• Automation and Continuous Improvement: Reduce manual effort across security operations through automation, scripting, and integration.
• Security Tooling and Services: Own the security tooling estate and work closely with our external providers to ensure the services we buy deliver the outcomes we need.
• Incident Investigation and Response: Own and run security incidents from start to finish, covering technical investigation and triage, containment, remediation, closure, and keeping the business informed.
• Security Awareness and Enablement: Provide the technical input behind awareness activity, simulated phishing exercises, and secure working practices.
• Technical Compliance and Assurance: Own the technical controls behind our certifications and assurance activity.
• Technical Risk Assessment: Lead technical security risk assessment across projects, suppliers, and internal services.
• Regulatory and Client Requirements: Implement, maintain, and evidence the technical controls we need to meet relevant legal, regulatory, and client security obligations.
• Supplier and Integration Security: Lead technical reviews of supplier and partner services, integrations, and access arrangements.

This is an excellent opportunity to work with a talented team across modern security technologies, and to make a meaningful contribution to strengthening Sword’s cyber security capability. If you enjoy solving technical security challenges and want the scope to own and improve how security operations runs, we would like to hear from you.

You will need to be able to demonstrate technical experience in cyber security engineering or security operations, including direct responsibility for the day-to-day running of security tooling and incident response. Attitude matters greatly. We are looking for someone who delivers results and brings a positive, practical approach to solving problems.

You should have hands-on experience in most of the following areas:

• Microsoft security technologies, in depth.
• Microsoft Defender across endpoint, identity, Office 365, and cloud apps.
• Microsoft Sentinel, including writing and tuning your own KQL queries.
• Microsoft Entra ID and Conditional Access policy design, testing, and troubleshooting.
• Automation.
• Security control operation.
• Frameworks and standards.
• Cyber Essentials Plus.
• Secure deployment.
• Communication.
• Background.

Qualifications and Personal Skills:

• Relevant technical certifications are desirable, particularly in Microsoft security technologies.
• Takes ownership, works independently when needed, and stays focused on delivering high-quality outcomes.
• Curious, proactive, and comfortable working out what needs doing rather than waiting to be asked.
• Able to manage workload effectively, prioritise sensibly, and maintain momentum in a busy technical environment.
• Communicates clearly and works well with technical and non-technical colleagues.
• Makes good use of tooling and automation to get more done.
• Keeps pace with the threat landscape out of habit rather than obligation.

At Sword, our core values and culture are based on caring about our people, investing in training and career development, and building inclusive teams where we are all encouraged to contribute to achieve success. We offer comprehensive benefits designed to support your professional development and enhance your overall quality of life.

Benefits Package:

• Personalised Career Development.
• Flexible working.
• A Fantastic Benefits Package.

At Sword we are dedicated to fostering a diverse and inclusive workplace and are proud to be an equal opportunities employer. If you don’t tick all the boxes but feel you have some of the relevant skills and experience we’re looking for, please do consider applying and highlight your transferable skills and experience.