Cyber Security Engineer SME – 11909HS

Key Responsibilities

• Cyber Security Tooling: Manage the day-to-day operation, maintenance, configuration and lifecycle management of multiple enterprise cyber security platforms.
• Red Team & Forensics: Support the operation and maintenance of red team tools, digital forensic solutions, EDR platforms, threat monitoring capabilities and decoy systems.
• Platform Engineering: Deploy, configure, patch, upgrade and maintain security tools, including rolling out new features and ensuring platforms remain reliable and fit for purpose.
• Operational Support: Investigate and troubleshoot platform issues independently, identifying root causes and resolving problems without unnecessary reliance on infrastructure teams.
• Infrastructure & Integration: Understand how security tools interact with servers, operating systems, networks, Active Directory, DNS, Group Policy and other connected systems.
• Security Controls: Support the configuration and maintenance of security controls, including firewalls, access controls, multi-factor authentication and email security policies.
• Analysis & Monitoring: Assist with log analysis, threat monitoring, security incident investigation and the identification of vulnerabilities or control weaknesses.
• Tool Implementation: Contribute to the evaluation, deployment and integration of new cyber security technologies as requirements evolve.
• Risk & Assurance: Support security assessments, vulnerability and patch management, audit activities and compliance with internal policies and recognised security standards.
• Continuous Improvement: Identify opportunities to improve tooling performance, automate repetitive tasks, reduce platform incidents and strengthen detection and control effectiveness.
• Stakeholder Management: Collaborate with cyber security specialists, infrastructure and engineering teams, vendors, audit and risk stakeholders, producing clear technical documentation and operational handovers.

Essential Skills & Experience

• 8+ years’ experience in cyber security or information security, with strong hands-on experience operating and supporting enterprise security tooling.
• Proven experience managing multiple security platforms in complex enterprise environments, balancing BAU operations with engineering improvements and new implementations.
• Strong technical understanding of Windows Server, Linux, infrastructure, networking and operating systems.
• Ability to troubleshoot integrated environments independently, including issues involving Active Directory, DNS, Group Policy, servers and networked assets.
• Broad knowledge of cyber security domains, including security governance, identity and access management, access controls, threat intelligence, asset management, risk management, security testing, incident management, vulnerability management and patching.
• Understanding of how enterprise security tools are deployed, configured, integrated, maintained and operated within on-premises, cloud-native or hybrid environments.
• Experience supporting security policies, standards, procedures and technical controls.
• Familiarity with security frameworks and regulatory standards, such as ISO 27001, NIST and CIS.
• Experience working with cross-functional engineering teams, technology vendors and operational stakeholders.
• Strong analytical, troubleshooting and problem-solving skills, with the ability to manage ambiguity, competing priorities and high levels of responsibility.
• Excellent written and verbal communication skills, including the ability to explain technical findings to non-technical audiences and support audit and risk engagements.

Desirable Experience

• Hands-on experience with red team tooling, digital forensics solutions such as EnCase, EDR platforms such as Trellix, continuous threat monitoring or deception technologies.
• Experience with enterprise firewall technologies, email security controls, MFA policies and access management solutions.
• Scripting or automation skills using Python, Bash, PowerShell or Ansible.
• Exposure to Azure, AWS, VMware or other virtualised and cloud environments.
• Familiarity with ServiceNow ITSM and security tooling change and incident management processes.
• Experience supporting internal and external audits and managing relationships with risk, compliance and assurance teams.
• Relevant certifications such as CISSP, Security+, CEH, GCIA or vendor-specific security qualifications.