Cyber Security Engineer

Vallum Associates; City Of London; On-site; GBP 83,000 - 120,000; Full time

Job summary

Vallum Associates in London seeks a Cyber Security Engineer to deliver hands-on security engineering for IT and OT, ensuring central policies and controls are locally implemented. The role sits at the interface with SOC, CERT and specialist teams to protect digital services.

You will work across infrastructure, cloud and network teams to harden systems, manage vulnerabilities, support incident response, and translate policy into technical controls across EDR, IAM, MFA and network segmentation.

Qualifications

• Hands-on cyber engineering in a medium or large, technically complex organisation.
• Implementing enterprise security controls across IT/OT
• Vulnerability management and remediation across environments
• Supporting incident investigation and remediation
• Working with infrastructure, network, cloud, identity and application teams
• Security review of technical solutions and threats
• Turning policy into technical controls
• Working with centrally provided cyber services

Responsibilities

• Act as local technical SME for IT and OT; implement, operate and improve security controls across EDR, IAM, MFA, PAM.
• Work with infrastructure, application, cloud and network teams to harden systems.
• Support end-to-end vulnerability management and remediation across IT and OT.
• Be the local interface with SOC/CERT; assist investigation, containment and lessons learned.
• Coordinate IT/OT security measures and secure remote access where needed.
• Contribute to security architecture and cyber-by-design principles.
• Support risk, governance and assurance activities.

Skills

Hands-on cyber engineering

Enterprise security controls

Vulnerability management

Incident investigation

IT/OT collaboration

Security review of solutions

Policy to technical controls

Centrally provided cyber services

Tools

EDR

IAM

MFA

PAM

Job description

Title: Cyber Security Engineer

Location; London, Uk

Duration: 24 Months Fix term Contract

Job Description:

Provide hands-on technical cyber security expertise to protect the resilience and secure operation of UK's IT, OT, applications, infrastructure and digital services. The role is the local interface with central and Group Cyber Security (SOC, CERT, specialist teams), making sure central policies, standards and controls are implemented locally.

Experience

• Hands-on cyber engineering in a medium or large, technically complex organisation.
• Implementing enterprise security controls.
• Vulnerability management and remediation.
• Supporting incident investigation and remediation.
• Working with infrastructure, network, cloud, identity and application teams.
• Security review of technical solutions.
• Turning policy into technical controls.
• Working with centrally provided cyber services.

Key Accountabilities

• Engineering and operations: Act as local technical SME for IT and OT. Implement, operate and improve security controls across EDR, IAM, MFA, PAM, network segmentation, email, cloud, monitoring/logging, vulnerability management and device controls. Work with infrastructure, application, cloud and network teams to harden systems.
• Vulnerability management: Support the end-to-end process across IT and, where appropriate, OT. Review findings, coordinate risk-based remediation with asset owners, validate fixes, support patching and hardening, and manage security exceptions.
• Incident management: Be the local technical interface with SOC/CERT. Support investigation, containment, recovery and lessons learned, and take part in incident exercises and resilience testing.
• OT / IC security: Work with plant and engineering teams on IT/OT segregation, secure remote access, legacy-system risk, asset visibility and monitoring, applying IEC 62443 and the NCSC CAF.
• Security architecture / cyber-by-design
• Risk, governance and assurance