Cyber Security Engineer

The Role

We're looking for an experienced Cyber Security Engineer with deep, hands-on expertise in Endpoint Detection & Response (EDR) technologies. This is a technical engineering role, not a governance or advisory position.

Key Responsibilities

• Configure, administer and optimise enterprise EDR platforms.
• Deploy and onboard endpoints across large enterprise environments.
• Develop and tune detection policies, prevention rules, exclusions and response workflows.
• Investigate endpoint security events and provide technical remediation guidance.
• Lead and support Proof of Concept (POC) engagements for endpoint security technologies.
• Assess EDR platforms based on detection capability, operational effectiveness and performance.
• Work closely with SOC, Infrastructure and Desktop Engineering teams to implement and improve endpoint security controls.
• Integrate EDR tooling with SIEM and wider security platforms where required.
• Produce technical documentation, implementation guides and engineering standards.

Essential Experience

• Strong hands-on engineering experience with enterprise Endpoint Detection & Response (EDR) platforms.
• Commercial experience configuring and administering one or more of: Microsoft Defender for Endpoint (MDE), CrowdStrike Falcon, Trend Micro Vision One/Apex One.
• Experience configuring security policies, onboarding endpoints, exclusions, attack surface reduction rules and detection tuning.
• Experience deploying or migrating enterprise EDR solutions.
• Strong understanding of endpoint security, malware protection, incident response and threat detection.
• Experience investigating endpoint alerts and supporting security incidents.
• Comfortable working in complex enterprise Windows environments.

Highly Desirable

• Experience with all three platforms (Microsoft Defender for Endpoint, CrowdStrike Falcon and Trend Micro Vision One/Apex One).
• Experience integrating EDR platforms with Microsoft Sentinel, Splunk or other SIEM solutions.
• Threat Hunting experience.
• PowerShell Scripting or automation.
• Microsoft Intune and Entra ID experience.
• MITRE ATT&CK knowledge.
• Experience supporting large enterprise endpoint estates (5,000+ devices).