Cyber Security Engineer

We are seeking a Cyber Security Engineer to join an established Cyber Security Operations team supporting a large, complex enterprise technology environment.

This is a hands-on engineering role focused on the administration, maintenance, monitoring and continuous improvement of enterprise cyber security platforms.

You will work closely with senior security professionals across Microsoft Sentinel, SIEM, detection, security monitoring, cloud security, endpoint protection, identity, vulnerability management and automation/SOAR.
The role would suit either an established Cyber Security Engineer or a technically strong SOC/Security Analyst looking to move deeper into security engineering.

What You'll Be Doing

• Administer, configure and maintain enterprise cyber security platforms.
• Support Microsoft Sentinel, including analytics rules, workbooks, data connectors, watchlists, automation rules and incident configuration.
• Onboard and maintain security logs for detection, investigation, reporting and compliance.
• Review false positives and contribute to alert and detection tuning.
• Perform tooling health checks covering data ingestion, connectors, alerting, access and platform availability.
• Troubleshoot configuration, integration, telemetry and performance issues.
• Support endpoint detection, vulnerability management, cloud security, email security, identity protection and data protection platforms.
• Maintain integrations, service accounts, access controls and security platform configurations.
• Develop, test and maintain SOAR and security automation workflows supporting investigation, enrichment, containment and response.
• Support cyber incidents by ensuring appropriate logs, alerts, dashboards and investigation tools are available.
• Work with internal technology teams and vendors to resolve security tooling issues.
• Maintain clear technical documentation, procedures and configuration records.

Ideally you will bring:

• Experience administering or supporting Microsoft Sentinel or another enterprise SIEM.
• Exposure to Microsoft/Azure security technologies.

Experience across one or more of:

• Endpoint security / EDR
• Identity security
• Cloud security
• Vulnerability management
• Email security
• Data protection
• Experience troubleshooting security tooling, integrations or telemetry.
• Exposure to alert tuning, detection engineering or log management.
• An understanding of security automation or SOAR.
• Awareness of frameworks including NIST CSF, ASD Essential Eight, ISO 27001/2 or CIS Controls.
• Strong technical documentation and communication skills.

You'll gain broad exposure across enterprise security technologies rather than being restricted to one narrow area.  You'll work alongside experienced cyber security professionals while developing deeper capability across:
SIEM → Detection → Security Tooling → Cloud → Automation → Incident Response

 
If you meet the above crtiteria, please click APPLY NOW.