This role provides an excellent opportunity to influence the organisation's cyber strategy while delivering practical engineering solutions that strengthen security across the business.

Main Duties

• Administer, maintain, and enhance cyber security technologies across the enterprise, including SIEM, DLP, vulnerability management, endpoint protection, email security, and web security platforms.
• Respond to requests from Security Operations, Incident Response, and Vulnerability Management teams to optimise and improve security tooling and associated configurations.
• Design, implement, and maintain security controls that support business, regulatory, and operational requirements.
• Work closely with Network, Infrastructure, Cloud, and Data Centre teams to ensure architecture and security controls are deployed effectively and securely.
• Support the development, implementation, and continual improvement of security monitoring, detection, and response capabilities.
• Maintain the operational availability, performance, and security of cyber security platforms.
• Plan, prepare, test, and execute technology upgrades, patches, and configuration changes across cyber security infrastructure.
• Record faults, perform troubleshooting activities, and coordinate repairs or vendor support activities where required.
• Conduct Moves, Adds, Changes, and Deletes (MACD) activities in accordance with approved processes and change management procedures.
• Ensure all security platforms are maintained to the required patching and compliance standards.
• Manage and coordinate maintenance activities through established change control processes.
• Maintain accurate Configuration Items (CIs) and associated records within the CMDB.
• Produce reports on platform availability, capacity, security risks, vulnerabilities, incidents, and continual service improvement activities.
• Support cyber security projects and initiatives, including new technology deployments and capability enhancements.
• Act as a technical subject matter expert, providing guidance and support to operational cyber teams and business stakeholders.
• Manage relationships with external vendors, service providers, and technology partners where required.

Technologies

Experience with some or all of the following technologies would be beneficial:

• Forcepoint DLP
• Forcepoint Web Security
• Forcepoint Email Security
• Nexpose / InsightVM
• IBM QRadar SIEM
• Microsoft Defender Suite
• Endpoint Protection Platforms (EPP/EDR)
• Vulnerability Management Solutions
• Network Security and Monitoring Tools

Candidate Requirements

Essential

• Experience implementing, supporting, and maintaining enterprise cyber security technologies.
• Experience developing automation, scripting, or security tooling using PowerShell, Python, or similar languages.
• Experience working within MOD, Defence, Government, or other highly regulated environments (e.g. banking, telecommunications, critical national infrastructure).
• Experience supporting security monitoring, detection, and response capabilities.
• Understanding of threat intelligence and its application to security controls, use cases, and detection engineering.
• Knowledge of designing, implementing, and supporting secure systems in line with HMG security requirements.
• Strong troubleshooting and problem-solving skills across infrastructure, security, and network technologies.
• Self-motivated with the ability to manage and prioritise workload effectively.
• Experience administering security platforms, including SIEM, vulnerability management, endpoint security, and data protection technologies.
• Experience integrating, onboarding, and troubleshooting log sources and security telemetry.
• Ability to obtain and maintain UK Security Clearance (SC).
• Strong understanding of TCP/IP networking, firewalls, routing, switching, and associated technologies.
• Experience working with technologies from vendors such as Microsoft, Cisco, Juniper, or equivalent.
• Excellent stakeholder engagement and customer-facing skills, with the ability to communicate effectively with technical and non-technical audiences.
• Knowledge of cyber security frameworks and best practices, including:
  • NIST 800-53
  • NIST 800-171
  • ISO 27001
  • CIS Controls
  • NCSC guidance

Desirable

• Degree in Cyber Security, Computer Science, Information Technology, or related discipline.
• Experience with cloud security technologies, particularly Microsoft Azure and Microsoft 365 security services.
• Experience supporting vulnerability management and remediation programmes.
• Experience with security architecture, engineering, or security solution design activities.
• Information Security certifications such as:
  • Security+
  • CISSP
  • CISM
  • GSEC
  • SSCP
  • GIAC certifications
• Technical certifications such as:
  • Microsoft Security Certifications
  • CCNP Security
  • Azure Security Engineer Associate
  • ITIL Foundation
• Experience working within Defence or National Security environments.

RTX adheres to the principles of equal employment. All qualified applications will be given careful consideration without regard to ethnicity, color, religion, gender, sexual orientation or identity, national origin, age, disability, protected veteran status or any other characteristic protected by law.