Contract Cyber Security Engineer

Objectives

• Establish a comprehensive cyber security governance and compliance framework, covering risk management, security strategy, incident response, business continuity and disaster recovery.
• Conduct a full cyber security audit, reviewing existing policies, procedures, access controls and security arrangements.
• Identify security risks, produce recommendations and drive remediation activities.
• Manage external penetration testing and ethical hacking exercises across the network perimeter and internal endpoints.
• Implement and manage an autonomous penetration testing / hacking solution.
• Oversee ongoing vulnerability management, patching, user access reviews, authentication protocols and security credentials.
• Manage and review phishing campaigns, firewall logging, security monitoring and threat detection.
• Work with MDR providers to monitor environmental health, investigate threats and resolve vulnerabilities.
• Produce regular progress reports for the IT Director, highlighting risks, actions and outstanding issues.
• Evaluate existing and emerging security technologies, working with third parties to recommend improvements.
• Progress them towards Cyber Essentials certification.

Skills & Experience

• You must be based within a commutable distance of Birmingham Airport to be considered for this role.
• Strong experience in a Cyber Security Engineer or similar technical security role.
• Experience establishing cyber security governance, compliance frameworks and risk management processes.
• A strong technical understanding of network security, firewalls, endpoint protection and vulnerability management.
• Experience managing penetration testing, ethical hacking and security auditing.
• Knowledge of Azure AD / identity and access management.
• Experience with security monitoring, MDR solutions, threat detection and incident response.
• Familiarity with tools such as ESET, WatchGuard, FortiGuard, Check Point, Bitdefender and SentinelOne.
• Experience with autonomous security testing tools, ideally Horizon3.ai NodeZero, would be beneficial.
• Strong communication skills, with the ability to report technical risks and recommendations to senior stakeholders.