Cyber Security Engineer

The Cyber Security Engineer

The Cyber Security Engineer will be a vital member of our newly established SecOps team, reporting directly to the Infrastructure Platforms Manager. This position is crucial in implementing and maintaining robust security measures across our infrastructure, as well as managing incident response.

This role involves developing, implementing, and sustaining security solutions designed to protect our systems against constantly evolving cyber threats, with a focus on transitioning to a zero-trust operating model. The Cyber Security Engineer will spearhead key security initiatives in collaboration with the Lead Cyber Security Engineer and play a pivotal role in enhancing our overall security posture. Additionally, the role will support the firm in its pursuit of ISO 27001 certification and the implementation of CIS controls.

Roles and Responsibilities

• Maintenance of the CrowdStrike platform, including configuring EDR policies, tuning SIEM rules, and optimizing the system for performance
• Work with the network engineers to implement posture management i.e. ICE/NAC segmentation/lateral movement control and firewalls
• Proactive collaboration with InfoSec to align CrowdStrike and other key security platforms with our security strategy and policies
• Leading or participating in incident response efforts, conducting root cause analysis, and developing runbooks for incident handling
• Monitoring for security threats, analysing alerts, and responding to incidents using CrowdStrike and other security tools. Conduct vulnerability scans and support remediation and risk mitigation efforts
• Oversee WAF, DDoS, VPN, and perimeter firewalls
• Work with Endpoints team to administer MFA, SSO, PAM, MDM/MAM, and Conditional Access
• Maintain security certificates, encryption keys, and IDS/IPS systems
• Collaborate with third-party penetration testers to identify, prioritize, and remediate security vulnerabilities
• Creating detailed reports on detected threats, incidents, and response actions, as well as documenting configurations, processes, and runbooks
• Keeping well-informed of the latest cybersecurity trends, emerging threats, and updates
• Comply with all relevant legal and regulatory obligations including the Solicitors Regulation Authority (SRA) Standards and Regulations, and Principles