Cyber Security Engineer

Hybrid working: 3 days per week required in the office.

The role will be joining as part of a newly established Security Operations (SecOps) team, playing a crucial part in implementing and maintaining robust security measures across infrastructure, as well as managing incident response.

The role will involve developing, implementing, and sustaining security solutions designed to protect systems against constantly evolving cyber threats, with a focus on transitioning to a zero-trust operating model.

Responsibilities:

• Maintenance of the CrowdStrike platform, including configuring EDR policies, tuning SIEM rules, and optimizing the system for performance
• Leading or participating in incident response efforts, conducting root cause analysis, and developing runbooks for incident handling
• Monitoring for security threats, analysing alerts, and responding to incidents using CrowdStrike and other security tools. Conduct vulnerability scans and support remediation and risk mitigation efforts
• Oversee WAF, DDoS, VPN, and perimeter firewalls
• Work with Endpoints team to administer MFA, SSO, PAM, MDM/MAM, and Conditional Access
• Maintain security certificates, encryption keys, and IDS/IPS system
• Creating detailed reports on detected threats, incidents, and response actions, as well as documenting configurations, processes, and runbooks