Stott and May
Cyber Security Engineer – PAM, CyberArk, EDR, SIEM
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Cyber Security Engineer – PAM, CyberArk, EDR, SIEM – Surrey based hybrid - £75,000 - £90,000
Working with a top financial services client to find a Cyber Security Engineer specialising in privileged access management, with CyberArk as the core platform. This is the senior tooling and identity specialist role in which you will own the design, deployment and health of the security tooling estate across the company’s Infrastructure, with PAM as your deepest expertise.
In addition to CyberArk this role carries breadth across the modern security stack, including working capability across EDR, SIEM, vulnerability management and the wider cyber products.
You will work closely with the SOC engineers and the Platform & Infrastructure teams.
This role requires 2-3 days onsite in Surrey and you will be able to work from home the rest of the week. This is an essential requirement, for team collaboration and on-site work.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Key Skills
- Proven skills in CyberArk design and administration, including PAM Self Hosted or Privilege Cloud.
- Experience deploying or operating at least two of: EDR platforms, SIEM, vulnerability management or email security.
- Strong scripting capability, using PowerShell or Python, applied to security tooling automation and integration.
- CyberArk Sentry – ideally but proven experience would work.
- Any of the following are nice to have: CyberArk Guardian, Microsoft SC-300, SC-200, AZ-500, or EDR vendor certifications.
Main Duties and Responsibilities
- Own CyberArk design, deployment and operation across the company platforms: vaulting, session management, secrets management and privileged threat analytics.
- Design PAM onboarding programmes: discovery, scoping, policy design and rollout.
- Integrate PAM with the wider identity stack: Entra ID, conditional access, MFA and just-in-time access patterns.
- Set privileged access standards and evidence them for audits, including ISO 27001 and Cyber Essentials Plus.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Tooling and Engineering
- Deploy, configure and maintain the security tooling estate: EDR, SIEM integrations, vulnerability scanning and email security.
- Own tooling health: version currency, coverage gaps, tuning quality and integration reliability.
- Automate deployment and operational tasks with scripts and APIs; contribute to the shared automation library.
- Act as senior escalation for identity and tooling incidents; support major incident response.
- Document designs, runbooks and standards to a level the wider team can operate from.
- Contribute tooling and PAM expertise to service reviews and solution scoping when needed.
- Adopt AI-assisted workflows for diagnostics, configuration review and documentation.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Location