The Fidelis Partnership
Senior Cyber Security Engineer
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Purpose of this role
The Senior Cyber Security Engineer will strengthen the organisation’s hands-on security engineering capability during a period of significant security maturity uplift. The role focuses on operationalising the deployed security tooling estate, executing the security remediation backlog, and producing control evidence to an audit-ready standard. The Senior Cyber Security Engineer will work closely with the Head of Cyber Security, infrastructure and IT operations teams, the outsourced SOC provider and third-party delivery partners to ensure security platforms deliver managed, measurable and evidenced protection aligned with regulatory expectations and recognised frameworks.
Key Responsibilities
Security Platform Operationalisation:
- Operationalise and tune the deployed security tooling estate, including CrowdStrike Falcon (EDR and Next-Gen SIEM), Wiz CSPM (Azure and AWS), Mimecast and the Microsoft security stack, moving platforms from deployed to fully managed through detection rule tuning, alert configuration, log source onboarding and compliance policy enablement.
- Triage and disposition security alerts across SIEM and EDR platforms, reducing alert backlog and improving detection fidelity through systematic investigation, rule refinement and false positive tuning.
- Support the implementation and tuning of identity and access controls, including Conditional Access policies, break-glass procedures, privileged access management and identity hygiene remediation such as shared account rationalisation, credential rotation and dormant privileged account deactivation.
Vulnerability Management and Remediation:
- Execute the security remediation backlog, prioritising and remediating vulnerabilities hands-on and coordinating remediation activities with infrastructure and IT operations teams through agreed change processes.
- Support patching governance and remediation tracking, ensuring critical findings are addressed within defined SLAs, and progress is evidenced for monthly reporting.
- Deliver secure configuration and compliance reporting across the estate, supporting a measurable uplift in security maturity against NIST CSF.
Security Operations and Incident Response:
- Act as the second cyber escalation point within the 24/7 security operating model, providing technical investigation, containment and response as part of the cyber on-call rota and supporting post-incident reviews.
- Onboard and manage the day-to-day relationship with the outsourced SOC/MDR provider, establishing operational handover processes and driving improvement in detection and response performance (MTTD/MTTR).
- Provide security input to change and architecture governance (CAB/ARB) and produce engineering documentation, runbooks and control evidence to an audit-ready standard.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Skills, Qualifications and Experience
- Extensive hands-on experience of security engineering, security operations and tactical security remediation delivery in live enterprise environments.
- Strong hands-on experience with CrowdStrike Falcon, including console management, detection rule creation and tuning, host investigation and response actions.
- Experience operationalising SIEM, EDR/XDR and vulnerability management platforms (for example CrowdStrike Next-Gen SIEM, Microsoft Sentinel or Microsoft Defender), including detection tuning, alert management and vulnerability scanning and reporting.
- Microsoft security stack experience across Entra ID, Active Directory and Group Policy, Defender and Microsoft 365, with email security (Mimecast or equivalent). Exposure to Microsoft Purview is desirable.
- Cloud security experience across Azure and AWS, including cloud security posture management (Wiz or equivalent).
- Demonstrable delivery of security maturity uplift against recognised frameworks such as NIST CSF and CIS Benchmarks, evidenced through measurable posture improvement.
- Experience onboarding or managing an outsourced SOC or managed security service, including operational handover and improvement of detection and response performance.
- Incident response experience, including out-of-hours working, with an evidence-focused working style and documentation that stands up to internal audit and external assurance.
- Experience in regulated financial services; insurance or Lloyd’s market experience and DORA awareness are desirable. Relevant certifications (such as ISC2 or Microsoft security and compliance certifications) are desirable.
About The Fidelis Partnership
The Fidelis Partnership is a leader in the Specialty, Bespoke and Reinsurance business, operating globally. Our team brings together vast cumulative experience in broking, underwriting, corporate, actuarial and operational roles, all working towards a unified goal of innovative discipline underwriting and operational excellence.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
With offices in Bermuda, London, Dublin, Brussels and Abu Dhabi, our efficient organisational structure focuses on marketing leading service delivery and quality, as well as operational excellence across all our functions.
Fidelis Ethos
Our culture is defined by our ethos. It is the foundation of who we are and the core of everything we do.
- Results – We want to be the best at the things we care about, so we focus on profitability over volume, with responsive decision-making and clear prioritised accountability
- Innovate – We aspire to lead the market in providing the services and products our clients need, and to drive change in the broader impact our industry has on human rights, society, and environmental sustainability
- Include – We create an environment where employees can bring their whole self to work, with open communication where everyone, irrespective of gender, ethnicity, sexual orientation or background, feels able to contribute ideas and be recognised and rewarded for their contribution.
- Unite – We operate as team of individual talents that actively seeks to reflect the diversity of the societies in which we operate, giving our business the widest range of inputs and perspectives
- Respond – We work in a business exposed to sudden shocks and changes – elemental, political, economic and human – so we remain nimble and ready for change.
Diversity and Inclusion
Our vision is for a workplace culture where differences are valued and where diversity of background, experience and thought are welcomed. We believe that developing and maintaining a diverse and inclusive organisation is critical to our success. Our hiring, assessment and selection process must be fair, free from bias and one which ensures we select the right person for the job, based on merit.
We welcome applications from all qualified candidates. To ensure that all candidates have a fair opportunity to show their abilities during the recruitment process, adjustments may be required. If your physical or mental health or disability may necessitate an adjustment, please contact to discuss. All information relating to your health or disability will be treated in accordance with our data protection policy.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills