Cyber Security Engineer SME

Your tasks

Inside IR35 - 4 days a week We are looking for an experienced Cyber Security Engineer SME to join a growing cyber security team, taking ownership of the operational management, engineering and lifecycle maintenance of a broad range of enterprise security tools.

Working closely with cyber security colleagues in London and India, as well as wider technology and engineering teams, you will help strengthen security controls, improve operational resilience and support the ongoing evolution of the organisation's cyber security capabilities.

• Cyber Security Tooling: Manage the day-to-day operation, maintenance, configuration and lifecycle management of multiple enterprise cyber security platforms.
• Red Team & Forensics: Support the operation and maintenance of red team tools, digital forensic solutions, EDR platforms, threat monitoring capabilities and decoy systems.
• Platform Engineering: Deploy, configure, patch, upgrade and maintain security tools, including rolling out new features and ensuring platforms remain reliable and fit for purpose.
• Operational Support: Investigate and troubleshoot platform issues independently, identifying root causes and resolving problems without unnecessary reliance on infrastructure teams.
• Infrastructure & Integration: Understand how security tools interact with servers, operating systems, networks, Active Directory, DNS, Group Policy and other connected systems.
• Security Controls: Support the configuration and maintenance of security controls, including firewalls, access controls, multi-factor authentication and email security policies.
• Analysis & Monitoring: Assist with log analysis, threat monitoring, security incident investigation and the identification of vulnerabilities or control weaknesses.
• Tool Implementation: Contribute to the evaluation, deployment and integration of new cyber security technologies as requirements evolve.
• Risk & Assurance: Support security assessments, vulnerability and patch management, audit activities and compliance with internal policies and recognised security standards.
• Continuous Improvement: Identify opportunities to improve tooling performance, automate repetitive tasks, reduce platform incidents and strengthen detection and control effectiveness.
• Stakeholder Management: Collaborate with cyber security specialists, infrastructure and engineering teams, vendors, audit and risk stakeholders, producing clear technical documentation and operational handovers.

Requirements

This is a hands-on engineering role suited to someone with strong cyber security expertise and a solid understanding of IT infrastructure, Windows Server, Linux and networking. You will be responsible for ensuring existing security platforms remain secure, available and effective, while supporting the implementation and integration of new tools and capabilities.

• 8+ years' experience in cyber security or information security, with strong hands-on experience operating and supporting enterprise security tooling.
• Proven experience managing multiple security platforms in complex enterprise environments, balancing BAU operations with engineering improvements and new implementations.
• Strong technical understanding of Windows Server, Linux, infrastructure, networking and operating systems.
• Ability to troubleshoot integrated environments independently, including issues involving Active Directory, DNS, Group Policy, servers and networked assets.
• Broad knowledge of cyber security domains, including security governance, identity and access management, access controls, threat intelligence, asset management, risk management, security testing, incident management, vulnerability management and patching.
• Understanding of how enterprise security tools are deployed, configured, integrated, maintained and operated within on-premises, cloud-native or hybrid environments.
• Experience supporting security policies, standards, procedures and technical controls.
• Familiarity with security frameworks and regulatory standards, such as ISO 27001, NIST and CIS.
• Experience working with cross-functional engineering teams, technology vendors and operational stakeholders.
• Strong analytical, troubleshooting and problem-solving skills, with the ability to manage ambiguity, competing priorities and high levels of responsibility.
• Excellent written and verbal communication skills, including the ability to explain technical findings to non-technical audiences and support audit and risk engagements.

Desirable Experience

• Hands-on experience with red team tooling, digital forensics solutions such as EnCase, EDR platforms such as Trellix, continuous threat monitoring or deception technologies.
• Experience with enterprise firewall technologies, email security controls, MFA policies and access management solutions.
• Scripting or automation skills using Python, Bash, PowerShell or Ansible.
• Exposure to Azure, AWS, VMware or other virtualised and cloud environments.
• Familiarity with ServiceNow ITSM and security tooling change and incident management processes.
• Experience supporting internal and external audits and managing relationships