Cyber Security Engineer

Laing O'Rourke; Dartford; On-site; GBP 65,000 - 80,000; Full time

Job summary

Laing O'Rourke in Dartford is seeking a Cyber Security Engineer (Grade 5) to design, implement and continually improve security controls across a global technology environment. You will work with IT, projects and risk teams to embed security from the outset and align with industry frameworks.

The role emphasises secure-by-design practices, incident response support and ongoing policy development within a large, international engineering and construction group.

Qualifications

• Experience with enterprise infrastructure, including Windows and Microsoft Azure cloud or hybrid environments.
• Hands-on experience with the Microsoft E5 security toolset.
• Experience implementing and supporting security technologies (SIEM, EDR, firewalls, vulnerability management, IAM, encryption).
• Knowledge of security frameworks such as Essential Eight, NIST CSF, ISO 27001 or Cyber Essentials.
• Ability to translate business and project needs into proportionate security controls.
• Ability to communicate security and risk clearly to technical and non-technical audiences.
• A structured and considered approach to solving complex problems, including during security incidents.

Responsibilities

• Design, implement and maintain security controls across the technology environment.
• Collaborate with IT, projects and business to meet security requirements.
• Help shape the cyber security roadmap and align with frameworks and certifications.
• Embed secure-by-design principles across IT and business projects.
• Assess threats and recommend proportionate remedial action.
• Support incident response in collaboration with Cyber Operations.
• Maintain and improve cyber security policies and processes.
• Evaluate technologies and provide clear security leadership recommendations.

Skills

Cyber security engineering

Windows & Azure

MSE5 security tools

SIEM experience

EDR experience

Firewalls

Vulnerability management

IAM & encryption

Security frameworks

Risk communication

Problem solving

Education

Cybersecurity degree or equivalent

Job description

Cyber Security Engineer - Job Grade 5

Location: Dartford

Help protect the people, projects and information behind some of the world's most complex engineering and construction programmes.

We're looking for a Cyber Security Engineer to help translate our security roadmap into practical, well-engineered solutions. This is a hands‑on opportunity to apply your technical expertise, influence security by design and strengthen a modern, resilient technology environment.

Laing O'Rourke's IT function has renewed its strategy to support the company's ambition to transform the construction industry, making it more sustainable, more productive, and fit for the future.

Technology has a critical role to play in achieving this ambition. Our focus is on applying digital capability in ways that genuinely matter, shaping how complex projects are delivered, how decisions are made, and how innovation improves outcomes for people, communities, and the environment.

Our mission is clear: to create a modern and resilient technology environment where trusted data informs every decision, AI enhances every process, and digital capability enables the organisation to operate with greater scale and productivity.

To deliver this, we are building a different kind of IT function, one that is trusted by the business, forward looking in its thinking, and deeply connected to operational outcomes. We are looking for individuals who are curious, thoughtful, and motivated by contributing to work that has real industry impact.

The Role

Based in Dartford and working as part of a global Cyber Security team, you will design, implement and continually improve the controls that protect our technology environment.

You will collaborate with colleagues across IT, projects and the wider business to understand their needs and introduce proportionate controls that meet business, compliance and security requirements. Working closely with cyber security architecture and operations specialists, you will help ensure security is considered from the outset of projects rather than added later.

Key Responsibilities

• Design, implement and maintain cyber security solutions that reduce business risk and support compliance with security policies and standards.
• Work with business units, project teams and risk specialists to identify security requirements through risk and business impact assessments.
• Help shape and deliver the cyber security roadmap, including controls supporting relevant industry frameworks and certifications.
• Embed secure-by-design principles across IT and business projects, providing practical guidance, standards, templates and security baselines.
• Assess emerging threats, vulnerabilities and control techniques, recommending proportionate remedial action.
• Support the response to critical cyber security incidents in collaboration with Cyber Operations.
• Maintain and improve cyber security policies, standards and processes.
• Evaluate technologies, suppliers and security services, using your findings to provide clear recommendations to security leadership.

Essential Requirements

• Relevant cyber security engineering qualifications or equivalent practical experience.
• Experience of enterprise infrastructure, including Windows and Microsoft Azure cloud or hybrid environments.
• Hands‑on experience with the Microsoft E5 security toolset.
• Experience implementing and supporting a range of security technologies, including SIEM, EDR, firewalls, vulnerability management, identity and access management, encryption and related security controls.
• Working knowledge of recognised security frameworks such as Essential Eight, NIST Cybersecurity Framework, ISO 27001 or Cyber Essentials.
• Understanding of information risk principles and the ability to translate business and project needs into proportionate security controls.
• Ability to communicate security and risk clearly to technical and non-technical audiences.
• A structured and considered approach to solving complex problems, including during security incidents.

Desirable Requirements

• Experience of security testing and vulnerability management, including penetration testing or code review.
• Experience developing or improving IT security policies, processes and standards.
• Audit, compliance or governance experience, including knowledge of regulations such as GDPR and DISP.
• An understanding of how security controls affect end users within a complex organisation.
• Relevant professional certifications such as CISSP, CISM, CISA or CRISC, or equivalent professional development and experience.

What Makes This Role Compelling

You will have the opportunity to work on meaningful security challenges across a complex international business. Your work will directly contribute to protecting critical information and projects, improving organisational resilience and embedding security into the way technology solutions are designed and delivered.

The role offers scope to apply and develop your technical expertise, contribute ideas and help shape the future of cyber security at Laing O'Rourke.

About Laing O'Rourke

Laing O'Rourke is an international engineering and construction business known for pushing boundaries in digital engineering, modern methods of construction and sustainable delivery. With more than 150 years of heritage, we are committed to creating environments in which diverse teams can excel and thrive.

Accessibility & Inclusion

We are proud to be part of the Disability Confident scheme. If you meet the essential criteria and would like to be considered through our Offer an Interview scheme, please let us know. We're also happy to provide reasonable adjustments throughout the recruitment process.

If you require an alternative format of this advert or need support during the application, please contact: [e-mail]