Global Cyber Security Engineer

UGI International | Full-Time, Permanent | Office/Remote (UK Based)

Protect. Monitor. Improve. A Cyber Security Role with Genuine Global Reach.

The Opportunity

UGI International is looking for a Global Cyber Security Engineer to join our Cybersecurity team, a role that sits at the operational heart of how we protect our people, systems and data across multiple markets.

This is an established, hands-on role, working under the direction of the UGI International Cybersecurity Manager and the Cyber Security Threat Intelligence Manager. You will take day-to-day ownership of the administration and optimisation of a modern, enterprise-grade security toolset, alongside contributing to risk assessments, threat monitoring, compliance activities, incident response and exposure management, and you will work closely with IT teams across UGI International's business units in a truly international role, conducted in English, with regular contact with colleagues in the UK and the Nordics. We are looking for an experienced security professional, ideally with at least five years in an IT, cybersecurity or risk management role, who combines strong technical grounding with the ability to build effective working relationships across an international business.

What You Will Be Doing

Reporting to the Cybersecurity Manager, your responsibilities will include:

• Administering UGI's core security toolset, including Taegis (SIEM/XDR), CrowdStrike, Proofpoint, Zscaler, Rapid7, KnowBe4, Phish ER, Axonius, WASP/OCP and Security Scorecard, and applying working knowledge of SIEM, IDS/IPS, vulnerability scanning, encryption and Network Access Controls to support day-to-day security operations
• Supporting the configuration and management of Azure and O365 security, including Entra ID, conditional access policies and MFA enforcement, and monitoring cloud security posture, including security scores and policy compliance
• Analysing results from scheduled scanning and reporting, following up with IT staff on issues identified, maintaining accurate issue tracking, and communicating virus and patch protection alerts and compliance across the estate
• Raising, managing and tracking ServiceNow tickets to remediate security incidents, vulnerabilities and patching requests, in line with change and incident management processes
• Supporting incident response, including documentation, methodology and coordination of responses to security events, understanding the architecture of infrastructure security systems and deployments, and supporting the regular review of security processes and controls against frameworks including GDPR, SOX ITGC, ISO/IEC 27001, NIST, CIS Critical Security Controls and NIS2
• Contributing to the external exposure management programme, supporting attack surface visibility, vulnerability prioritisation and remediation tracking in line with the global CTEM framework
• Contributing to the development and delivery of security awareness training, including phishing simulation campaigns and KnowBe4 content management, and mentoring junior IT staff on security best practice
• Performing Proof of Concept evaluations on new security products, researching InfoSec trends and analysing Threat Intelligence reports, and producing a monthly security metrics report for the Cybersecurity Manager