Cyber Security Engineer

Proactive Appointments; Baldock; Hybrid; GBP 60,000 - 90,000; Full time

Benefits offered by this job

Excellent Benefits Package

Job summary

Proactive Appointments is seeking a Cyber Security Engineer to strengthen security across a broad technology environment in a London hybrid role. You will engage with IT operations, development and platform teams to embed security best practices and manage vulnerabilities, incidents and cloud security risks.

The role covers IAM, endpoint security, cloud platforms, business applications and more, with opportunities to contribute to security standards and incident response exercises.

Qualifications

• Experience in cybersecurity across IAM, endpoint security, cloud and business applications.
• Proven ability to manage vulnerabilities and coordinate incident response.
• Experience with modern device-management and security tooling.
• Excellent communication with technical and non-technical stakeholders.

Responsibilities

• Maintain and improve security controls across identity, endpoint, cloud and business applications.
• Review authentication, access, and privileges to promote least-privilege and zero-trust.
• Improve endpoint security and device compliance.
• Collaborate with IT operations to address security weaknesses in infrastructure.
• Review cloud services for security risks and excessive access.
• Support development teams in secure design and delivery.
• Coordinate vulnerability management and remediation activities.
• Investigate security alerts and incidents with internal and external teams.
• Produce clear reporting on risks, incidents and remediation progress.

Skills

Identity & access management

Endpoint security

Cloud security

Vulnerability management

Incident response

Security controls

Strong communication skills

Threat detection & response

Tools

EDR/XDR

Endpoint management platform

Job description

Cyber Security Engineer

London Hybrid (3 days on‑site per week) Permanent Excellent Benefits Package

Our client are looking for an experienced Cyber Security Engineer to join their team on a permanent basis. You'll help with strengthening the security of a broad technology environment and help embed effective security practices across a growing organisation. This role covers identity and access management, endpoint security, cloud platforms, business applications, vulnerability management and incident response. You will work closely with IT operations, development and platform teams, as well as selected external security providers.

Responsibilities

• Maintain and improve security controls across identity, endpoint, cloud and business application environments.
• Review authentication, access and administrative privileges, promoting least‑privilege and zero‑trust principles.
• Improve endpoint security, device compliance, secure configuration and protection against malicious activity.
• Work with IT operations to address security weaknesses in workplace technology and supporting infrastructure.
• Review cloud services and hosted workloads for security risks, configuration weaknesses and excessive access.
• Support development and platform teams in incorporating security into technical designs and delivery processes.
• Operate and improve the organisation's vulnerability and exposure‑management processes.
• Coordinate remediation activity with internal system owners and confirm that corrective actions are effective.
• Investigate security alerts and incidents, coordinating with internal teams and external security specialists.
• Maintain practical incident‑response procedures, escalation routes and supporting documentation.
• Participate in incident exercises and post‑incident reviews, ensuring that lessons result in measurable improvements.
• Review the security of SaaS applications, third‑party integrations and data‑sharing arrangements.
• Produce clear reporting on security risks, incidents, vulnerabilities and remediation progress.
• Support audits, customer assurance requests and relevant compliance activities.
• Develop technical security standards, operating procedures and guidance.

Experience Required

• 5 years of relevant experience in cybersecurity, infrastructure security, cloud security or a closely related technical role
• Practical experience securing enterprise identity, productivity and collaboration services.
• A good understanding of identity and access management, multifactor authentication, conditional access and privileged access.
• Experience securing and managing Windows endpoints through a modern device‑management platform.
• Experience using endpoint detection and response, extended detection and response, or comparable security technologies.
• Practical experience assessing, prioritising and coordinating the remediation of vulnerabilities.
• Working knowledge of public‑cloud security concepts, including identity, networking, logging, data protection and secure configuration.
• An understanding of common attack techniques and appropriate preventative and detective controls.
• Experience investigating security events or supporting incident response.
• The ability to evaluate technical findings and recommend proportionate, achievable improvements.
• The ability to write clear technical documentation, incident records and risk summaries.
• Strong communication skills and the ability to work effectively with technical and non‑technical colleagues.

Desired experience

• Experience working with an external security operations or managed detection and response provider.
• Experience implementing or improving a vulnerability‑management platform.
• Familiarity with cloud‑native security monitoring and configuration‑management services.
• Experience securing SaaS applications and third‑party integrations.
• Knowledge of email security, information protection and data‑loss prevention.
• Experience using scripting or automation to improve security operations.
• An understanding of network security and the protection of office‑based technology.
• Experience supporting penetration tests, audits or security certification activities.
• Familiarity with recognised frameworks such as ISO 27001, Cyber Essentials, NIST CSF or CIS Controls.
• A relevant technical certification in security, identity, cloud or endpoint management.
• Experience introducing security checks into software‑development and deployment processes.

Due to the volume of applications received for positions, it will not be possible to respond to all applications and only applicants who are considered suitable for interview will be contacted.

We take our obligations to protect your personal data very seriously. Any information provided to us will be processed as detailed in our Privacy Notice, a copy of which can be found on our website