Cyber Security Engineer

Comtecs Ltd; City Of London; Hybrid; GBP 80,000 - 95,000; Full time

Job summary

A leading global law firm seeks an experienced Cyber Security Engineer to strengthen its IT security posture. This hands-on role involves disaster recovery, vulnerability management, and ensuring that operational resilience measures are robust and continually improved. Candidates should have experience with security frameworks and tools such as Nutanix and Azure.

Benefits

Bonus

Benefits

Qualifications

• Experience in a hands–on Cyber Security Engineer role.
• Proficiency in disaster recovery and operational resilience practices.
• Solid knowledge of security frameworks (ISO27001, NIST).

Responsibilities

• Lead planning and execution of disaster recovery tests.
• Perform vulnerability scans to safeguard data.
• Drive remediation activities and maintain documentation.

Skills

Disaster recovery

Vulnerability management

CyberSec improvements

IT operational resilience

PowerShell

Python

Education

Relevant certifications (e.g., CEH, Microsoft SC-200)

Tools

Nutanix

Commvault

VMware

Azure

Job description

Cyber Security Engineer

CyberSec Engineer / IT Security Specialist – Disaster Recovery, Resilience Testing, CyberSec Improvements, Vulnerability Scanning / Management, Infrastructure, Nutanix, Commvault, VMware, Azure, PowerShell, Python; Law Firm, Permanent, London/ Hybrid (3/2). GBP80k – GBP95k (On Experience) +Bonus +Benefits

Global Low Firm seeks experienced Cyber Security Engineer / IT Security Specialist to join the IT Infrastructure Engineering Team and play a key role in the strengthening of the IT security position and critically ensuring that Disaster Recovery, failover, and operational resilience capabilities are effective and continually improved through ongoing testing and (re)engineering.

This is a hands–on, process–driven role where you will ensure that disaster recovery (DR), failover, and operational resilience capabilities are robust, tested, reviewed, and continuously improved. You'll play a critical part in safeguarding business continuity and strengthening our cyber security posture, working closely with infrastructure, security, and business continuity teams. As such the CyberSec Engineer / IT Security Specialist will:

• Lead the planning, orchestration, and execution of DR and resilience testing
• Perform targeted regular and ad–hoc scans to identify potential breaches of the firms data and security policies ensuring RTOs/RPOs are validated.
• Drive remediation activities to closure, maintaining clear evidence and documentation for client, regulatory, and audit standards.
• Partner with Infrastructure teams to identify and remediate vulnerabilities across hardware and software.
• Act as the primary technical liaison with the Business Continuity Planning (BCP) team, supporting BIAs and resilience obligations.
• Lead incident response investigations, mitigation, and ongoing security improvements.
• Support Cyber Essentials Plus accreditation and contribute to maintaining a strong external security rating.
• Produce clear reporting, dashboards, and technical documentation, ensuring runbooks and procedures are accurate and practical.

You will be an experienced Cyber Security Engineer who has worked in a hands–on capacity across a range of technologies with a significant focus on infrastructure, cloud and enterprise software environments. You will have broad InfoSec / CyberSec awareness combined with significant hands–on security engineering and resilience experience:

• Hands–on experience in disaster recovery, failover testing, and IT operational resilience.
• Solid knowledge of business continuity and security frameworks (ISO27001, ISO22301, NIST etc).
• Proficiency with infrastructure tooling and at least one scripting language (PowerShell or Python preferred).
• Experience with Nutanix, VMware, Commvault, and hybrid cloud platforms Azure (preferred), AWS or GCP.
• Understanding of vulnerability management, monitoring, and orchestration tools.
• Relevant certifications such as Microsoft SC–200, Certified Ethical Hacker (CEH), CBCP/CBCI or equivalent.

We are open to receiving applications from across a broad range of industries including Legal Services, Professional Services, Financial Services or Consultancy inc Deloitte, PwC, KMPG, Accenture, EY, McKinsey & Company etc.

This is a high–impact role where you will directly influence the security, resilience, and continuity of a leading professional services environment. You will have exposure to senior stakeholders, and the opportunity to shape how the firm safeguards and future–proofs the IT infrastructure. You will possess exceptional communication skills and have the commercial acumen to be able to influence at the most senior level of this global organisation.