Cyber Security Engineer

Actus Search; England; On-site; GBP 85,000 - 110,000; Full time

Job summary

Actus Search is seeking a dedicated cyber security engineer to own threat analysis and day-to-day security operations for a fast-growing global fund administrator. This is the firm's first dedicated security hire, reporting to the Head of IT and working across multiple jurisdictions.

You will design controls, monitor threats, manage incidents, and coordinate audits while shaping security posture across the global estate.

Qualifications

• Hands-on cyber/security engineer with threat analysis and incident response experience.
• Knowledge of security tooling: SIEM, EDR/XDR, vulnerability management, IAM.
• Experience securing cloud environments such as Microsoft 365, Azure and/or AWS.
• Capable of working independently as the sole dedicated security specialist.

Responsibilities

• Run continuous threat analysis and monitoring across the firm's global estate.
• Design, implement and maintain security controls across infrastructure, cloud, endpoints and identity.
• Lead incident detection, response and post-incident review with playbooks and escalation routes.
• Manage vulnerability scanning, patching cadence, and coordinate penetration testing.
• Support control frameworks and client assurance, including SOC 1 and ISAE 3402 evidence.

Skills

Threat analysis

Incident response

Communication

Independent work

Regulatory awareness

Tools

SIEM

EDR/XDR

Vulnerability management

Identity/access management

Microsoft 365

Azure

AWS

Job description

A newly created, dedicated cyber security engineering role. It will own threat analysis and day-to-day security engineering for a fast-growing global fund administrator.

ABOUT THE BUSINESS

Our client is a private equity-backed fund administrator that operates globally and is growing quickly. It has offices across the UK, the Isle of Man, the US and Asia, and serves clients in many regulatory jurisdictions. Its scale and growth mean it now needs a dedicated security function.

THE OPPORTUNITY

This is the firm's first dedicated cyber engineering hire. Until now, security has been split across senior technology leadership, the Head of IT and a qualified service desk engineer, alongside their other work.

The new hire will take full ownership of a standalone function focused on continuous threat analysis. They will have the chance to shape how security operates across a global, multi-jurisdiction business, with senior visibility and a clear remit.

KEY RESPONSIBILITIES

• Run continuous threat analysis and monitoring across the firm's global estate. Identify, assess and prioritise emerging threats.
• Design, implement and maintain security controls across infrastructure, cloud, endpoints and identity.
• Lead incident detection, response and post-incident review. Maintain playbooks and escalation routes.
• Manage vulnerability scanning and patching cadence, and coordinate penetration testing and remediation.
• Support control frameworks and client assurance, including SOC 1 and ISAE 3402 evidence, audits and client due diligence questionnaires.
• Track regulatory and data-protection requirements across the jurisdictions the firm operates in, and map them to technical controls.
• Report regularly to the Head of IT and senior leadership on threat landscape, risk posture and remediation progress.
• Raise security awareness across the business and advise the IT and service desk teams on secure practice.

SKILLS AND EXPERIENCE

• Hands-on experience as a cyber or security engineer, with a strong track record in threat analysis and incident response
• Practical knowledge of security tooling such as SIEM, EDR/XDR, vulnerability management and identity/access management
• Experience securing Microsoft 365, Azure and/or AWS environments
• Able to work independently as the sole dedicated security specialist, and to set priorities with limited direction
• Clear communicator who can explain risk to non-technical stakeholders
• Financial services background, ideally in fund administration, asset or wealth management, or banking
• Experience across multiple jurisdictions and regulatory regimes
• Exposure to SOC 1/ISAE 3402, ISO 27001, NIST or CIS frameworks
• Relevant certifications, such as CISSP, CISM, OSCP, GIAC or Microsoft security certifications