Cyber Security Engineer

Littlefish Group; East Midlands; Hybrid; GBP 50,000 - 75,000; Full time

Benefits offered by this job

The Littlefish Academy training

Referral bonus scheme

LinkedIn Learning access

Healthcare cash plan

Casual dress policy

Company Pension Scheme

Company social events

25 days annual leave + bank holidays

Annual leave purchase

Job summary

Littlefish is seeking an Internal Security Engineer to join its growing cyber security function in a hybrid role based in Nottingham or Sheffield. You will support governance, assurance and controls across ISO 27001, Cyber Essentials Plus and related frameworks, helping to strengthen our security posture.

You’ll work hands-on to manage vulnerabilities, improve configurations in Microsoft 365 and Azure, and contribute to risk management, security documentation, and awareness initiatives in a

Qualifications

• Experience administering enterprise security tooling in Microsoft 365 and Azure.
• ,

Responsibilities

• Support ISO 27001 activities and security control management.
• Remediate vulnerabilities across endpoints, servers, and cloud services.
• Improve security configurations in Microsoft 365 and Azure.
• Maintain Cyber Essentials Plus, NCSC CAF, and other frameworks.
• Maintain risk registers and support risk management processes.
• Develop, test, and maintain Business Continuity and Disaster Recovery plans.
• Create and maintain security documentation.
• Support security awareness initiatives and compliance communications.

Skills

Microsoft 365 security tooling

Azure security

Vulnerability management

PowerShell automation

Security governance

ISO 27001

Defender for Endpoint

Security certifications (SC-200, SC-3x

Tools

Microsoft 365

Azure

Microsoft Defender

Intune

Job description

Work location: Nottingham or Sheffield (Hybrid)

Must be eligible for SC Clearance (UK resident for the last 5 years) and NPPV2 clearance

Here at Littlefish, we look for people who can make a real difference and become a giant slayer. As the world around us continues to change, we look for people who grab that change with optimism and excitement. These are the passionate and high performing people who enjoy and thrive on thinking outside the box.

Our current employees are the giant slayers who have made Littlefish who we are today, and you will be the future employees who continue to add the drive, passion, and add to our skills and experience as we see Littlefish grow.

So, if this is ticking your boxes and you are excited at the thought of working with creative, passionate, energetic, friendly people- we would love to hear from you.

The role and what you’ll be getting up to on a day-to-day basis:

We’re building a strong and mature cyber security function, and we’re looking for an Internal Security Engineer to join us. This is a great opportunity for someone early in their career who wants to develop hands-on experience supporting and improving our security controls, systems and tooling in a growing managed services environment.

You’ll play a key role in supporting our security governance and assurance function, helping us maintain high standards across ISO 27001, Cyber Essentials Plus and wider compliance frameworks.

You will:

• Support ISO 27001 activities and ongoing security control management and improvements
• Support vulnerability management processes including remediating findings with both software and configurations
• Support security configuration improvements across our Microsoft 365 environment
• Support the maintenance of Cyber Essentials Plus, NCSC CAF and other compliance frameworks
• Contribute to risk management processes, including maintaining risk registers
• Help to develop, test and maintain Business Continuity and Disaster Recovery strategies
• Be comfortable with supporting security documentation creation and maintenance
• Support security awareness initiatives and wider compliance communication

What you bring:

• Demonstrable experience administering and managing enterprise security tooling within Microsoft 365 and Microsoft Azure environments.
• Strong practical experience identifying, assessing and remediating security vulnerabilities across endpoints, servers, cloud services and identity platforms.
• Experience implementing and improving security controls that measurably enhance an organisation's security posture.
• Hands-on experience working with vulnerability management solutions (for example Microsoft Defender Vulnerability Management, Qualys, Tenable or equivalent), interpreting findings and driving remediation activities.
• Proven experience administering Microsoft 365 security technologies, including Entra ID, Conditional Access, MFA, Microsoft Defender and security configuration management.
• Experience securing and administering Azure infrastructure, including remediation of security recommendations, secure configuration reviews and cloud security hardening activities.
• Strong understanding of endpoint, server and cloud security baselines, secure configuration standards and vulnerability remediation practices.
• Experience participating in and supporting technical change management processes, including change planning, implementation, testing and documentation.
• Familiarity with software deployment and patch management solutions, supporting the delivery of vulnerability and security remediation activities.
• Experience working within security, risk or compliance-driven environments aligned to frameworks such as ISO 27001, Cyber Essentials Plus and NCSC guidance.
• Experience with Microsoft Intune, Defender for Endpoint, Defender for Cloud, Sentinel or related Microsoft security technologies.
• Experience using PowerShell or automation to support security operations and remediation activities.
• Security certifications such as SC-200, SC-300, AZ-500, Security+, or equivalent.
• Experience supporting Cyber Essentials Plus, ISO 27001 audits or technical security assurance activities.

What can we offer you?

• Through our one of a kind training programme, the Littlefish Academy, you can increase your earnings by £4,500
• Referral bonus scheme of £1000 when you successfully refer a friend.
• Access to our LinkedIn Learning platform, with over 16000 expert-led online tutorials to enhance and achieve your personal and professional goals.
• Healthcare cash plan. This will give you access to online GP appointments, 24/7 access to qualified counsellors and cash back against a range of general healthcare
• Casual dress policy
• Company Pension Scheme
• Company social events
• 25 days annual leave plus public / bank holidays
• Purchase of annual leave scheme

Life at Littlefish:

Our company values shape who we are as a business, what we stand for and how we work. Hiring people with our values at heart, is very important as we see Littlefish grow.

I am High Performing- I like to raise the bar, we look at creating opportunities to increase quality and improve efficiency, we strive for service excellence.

I am Passionate- We build team success and celebrate them together, I am enthusiastic and energetic, I care about the people I work with and we support one another.

I Have a Can-Do Attitude- I am not afraid to step outside my comfort zone, we are not afraid to challenge status quo, we get stuff done!

I am Cyber Conscious - I am vigilant, responsible, and proactive in protecting our people, customers and organisation from Cyber threats.

Here at Littlefish we aim to be somewhere everyone can be themselves. We are committed to encouraging a diverse and inclusive community where everyone irrespective of who they are, or their background, can feel equal and supported

We encourage applications from people of all backgrounds. Please get in touch if you are concerned about any difficulties you may face during your recruitment process, so we adjust accordingly.

Part of our application process includes a set of ED&I (Equality, diversity and inclusion) questions. Please note, each question has a 'prefer not to say' option.