Senior Cyber Security Engineer in Colchester

We are one of the largest NHS organisations in England. Our scale provides exciting opportunities for development, innovation, research, education and training. Talk to us about our range of flexible working opportunities, apprenticeships and staff benefits. Equality, Diversity and Inclusion (EDI) is at the heart of all we do; and it forms part of ESNEFT’s core activities. The Trust operates and relies on everyone treating each other with dignity and respect, to receive equitable and fair treatment in the implementation of Policies, Procedures and in its Practices, to foster positive work relationships, and finally to act with integrity as a professional within ESNEFT as well as a representative of the NHS as a whole. The EDI Agenda reflects the Trust values such as Optimistic, Appreciative and Kind. In line with the NHS Long Term Plan, People Plan, People Promise and a Model Employer intrinsic in the Equality Diversity and Inclusion Agenda, we consistently strive to improve, to take the learning into Action for a better ESNEFT.

If you are passionate about patient care and want to develop your skills and knowledge then we are keen to hear from you.

This is an excellent opportunity for an experienced Cyber Security Engineer with strong technical expertise to take on a senior role within our Cyber Security team. By joining our team, you will play a pivotal role in protecting our organisation's critical systems and data, strengthening our security posture, and enabling the safe delivery of our services. If you are passionate about cyber security and looking to take the next step in your career, we would welcome your application.

We have a number of key security initiatives underway, including threat detection enhancement, identity and access management improvements, vulnerability management, incident response capability development, cloud security uplift, and ongoing security architecture reviews, alongside day-to-day operational support. You will work closely with our Infrastructure team to design, implement, and maintain technical solutions and security controls, ensuring security is embedded across our network, systems, and platforms.

Do you have proven skills across areas such as security monitoring and SIEM platforms, vulnerability assessment and penetration testing, incident response and threat hunting, firewalls and network security, identity and access management, endpoint protection, and cloud security (MS365 and Azure)? We value collaboration, initiative, and a strong commitment to safeguarding our organisation. In this fast-paced and evolving threat landscape, you will face new and varied challenges daily.

• Design, implement and maintain technical security controls, solutions and secure architectures across the Trust's Digital estate.
• Lead on the investigation, reporting and response to cyber security incidents, data breaches, phishing and malware.
• Carry out risk assessments, vulnerability assessments and internal audits, recommending action to strengthen the Trust's cyber security posture.
• Coordinate penetration testing and security audits, tracking findings through to remediation.
• Provide specialist technical advice and support to colleagues across ICT and the wider Trust on complex cyber security matters.
• Liaise with NHS England, NCSC and CareCERT on national alerts, threat intelligence and incident response, responding within DSPT-mandated timescales.
• Support the Trust's compliance with the NHS Data Security and Protection Toolkit (DSPT) and NCSC Cyber Assessment Framework (CAF).
• Provide mentoring and technical guidance to colleagues, deputising for the Head of IT Security & Compliance as required.

We are ESNEFT and we provide hospital and community health services to almost one million people across east Suffolk and north Essex. Our dedicated staff deliver care from acute hospitals in Colchester and Ipswich, community hospitals, surgeries, community clinics and in patients’ own homes. We pride ourselves on supporting our staff. We offer a wide range of training and development opportunities, as well as flexible working options. Along with supporting you to achieve your career goals we offer a generous pension scheme, unsocial hours payments (where applicable), 27 days annual leave on commencement (pro rata) and access to a range of NHS discounts. Our Staff Health and Wellbeing programme offers a variety of services. Our philosophy is that Time Matters to everyone. Across the Trust, we concentrate on improving the things we do and removing those which cause time delays for our staff and patients. We are investing in our commitment to Time Matters with a partnership with leading electronic patient record (EPR) supplier Epic. This digital transformation has brought what is widely regarded as the world’s best EPR system to ESNEFT, transforming life in hospital for staff and patients.

If you are passionate about patient care and want to develop your skills and knowledge, then we want to hear from you.

For full details of the responsibilities and duties of this role please see the attached job description.

Experience:

• Significant, proven experience in a Cybersecurity and/or Infrastructure management capacity with experience of supporting a complex multi-vendor environment.
• Ability to work autonomously and under own initiative for extended periods, exercising expert judgement and taking responsibility for complex, sensitive or novel security decisions.
• Handling complex organisational issues and constraints.
• Proven experience of workload planning and delivery of key targets within a service environment.
• Development and documentation of standard build documents and operating procedures.
• Infrastructure design, concepts and fault finding.
• Experience of leading, mentoring or providing technical direction to colleagues or project teams, and/or deputising for a senior team member.
• Experience of facilitating change in practice to improve services.
• Project management/co-ordination.
• NHS IT experience.
• Technical cybersecurity experience including network firewalls, anti-malware, and SIEM.
• Experience in risk management, asset management, vulnerability management, or incident response.
• Cyber assessment frameworks (e.g. NCSC CAF).
• Understanding and experience of ITIL4/5 and ISO27001.

Qualifications:

• Relevant degree or equivalent qualification or significant experience of working at degree level.
• Management /leadership qualification or equivalent knowledge at post graduate level.
• Evidence of continued professional development.
• Recognised cyber security certification (e.g. CISSP, CISM, CompTIA Security+, or equivalent).
• Project Management Qualification.
• Membership of a relevant professional body (e.g. BCS, ISACA, ISC2).

Knowledge and Skills:

• Information security concepts (asset management, risk management, threat and vulnerability management, identity and access management, logging and monitoring, security configuration and architecture, and cyber response and recovery).
• UK GDPR and Data Protection Act, and their application to information and cyber security.
• Awareness of the NIS Regulations and ISO 27001 principles.
• LAN/WAN & wireless networking design and concepts, as well as a good understanding of TCP/IP concepts and theory.
• Microsoft Active Directory and Windows server and client operating systems.
• Enterprise network technology experience (e.g. Extreme, Cisco etc).
• Systems and networking security (e.g. enterprise firewalls, anti-malware solutions, intrusion detection and prevention).
• Knowledge of problem-solving root cause analysis methods.
• HSCN network and NHS cybersecurity.
• Penetration testing methodologies and tools.
• Email security and web proxy/filtering technologies.
• Vulnerability assessment and risk management.
• Business resilience concepts (business continuity and disaster recovery).
• Scripting (e.g. PowerShell) and database administration (MSSQL).
• Preparing user guidance on cybersecurity topics.

Successful candidates may be charged for their DBS check. Please ensure you read the information found in the attached DBS Information document. The Trust is committed to its staff and their development and to equal opportunities and diversity. Applications are welcomed from all sections of the community. Whilst we welcome applications from all and your application will be considered on individual merit, if you are offered a position and require a Skilled Worker Certificate of Sponsorship we may not be able to process your application to the final stage due to Home Office eligibility. Please note Band 2 roles are not eligible for sponsorship. In submitting an application form, you authorise East Suffolk and North Essex NHS Foundation Trust to confirm any previous NHS service details via the Inter Authority Transfer (IAT) process should you be appointed to the post. We would like to take this opportunity to thank you for your interest in East Suffolk and North Essex NHS Foundation Trust; we look forward to receiving your application for employment.