Cyber Security Engineer

Charles Russell Speechlys

Greater London

Hybrid

GBP 50,000 - 80,000

Full time

14 days+

Get more replies from employers

Send a job-specific resume in minutes.

Job summary

Charles Russell Speechlys is seeking a Cyber Security Engineer to join their SecOps team in Greater London. The role focuses on maintaining security measures, managing incidents, and supporting the pursuit of ISO 27001 certification. Candidates should have experience with CrowdStrike EDR and a strong understanding of security frameworks like PCI-DSS and ISO 27001. The position offers a hybrid working model, allowing flexibility while ensuring robust security across the firm's infrastructure.

Qualifications

Experience with CrowdStrike EDR, Cisco ISE, Mimecast, Tessian or equivalent email DLP.
Deep understanding of Security Frameworks & Compliance (PCI-DSS, ISO 27001, NIST, CIS).
Proficient in networking.

Responsibilities

Maintain CrowdStrike platform, configure EDR policies and optimize performance.
Work with network engineers on posture management and firewalls.
Monitor security threats and respond to incidents.
Generate reports on detected threats and response actions.

Skills

CrowdStrike EDR

Cisco ISE

Active Directory

Palo Alto Firewalls

Networking

Education

CISSP

Crest Practitioner Security Analyst

Palo Alto Network Certified Security Operations Professional

Job description

The Cyber Security Engineer will be a vital member of our newly established SecOps team, reporting directly to the Infrastructure Platforms Manager. This position is crucial in implementing and maintaining robust security measures across our infrastructure, as well as managing incident response. The role involves developing, implementing, and sustaining security solutions designed to protect our systems against constantly evolving cyber threats, with a focus on transitioning to a zero‑trust operating model. The Cyber Security Engineer will spearhead key security initiatives in collaboration with the Lead Cyber Security Engineer and playing a pivotal role in enhancing our overall security posture. Additionally, the role will support the firm in its pursuit of ISO 27001 certification and the implementation of CIS controls.

Roles and Responsibilities

Maintenance of the CrowdStrike platform, including configuring EDR policies, tuning SIEM rules, and optimizing the system for performance.
Work with the network engineers to implement posture management including ICE/NAC segmentation, lateral movement control and firewalls.
Proactive collaboration with InfoSec to align CrowdStrike and other key security platforms with our security strategy and policies.
Leading or participating in incident response efforts, conducting root cause analysis, and developing runbooks for incident handling.
Monitoring for security threats, analysing alerts, and responding to incidents using CrowdStrike and other security tools. Conduct vulnerability scans and support remediation and risk mitigation efforts.
Oversee WAF, DDoS, VPN, and perimeter firewalls.
Work with Endpoints team to administer MFA, SSO, PAM, MDM/MAM, and Conditional Access.
Maintain security certificates, encryption keys, and IDS/IPS systems.
Collaborate with third‑party penetration testers to identify, prioritize, and remediate security vulnerabilities.
Creating detailed reports on detected threats, incidents, and response actions, as well as documenting configurations, processes, and runbooks.
Keeping well‑informed of the latest cybersecurity trends, emerging threats, and updates.
Comply with all relevant legal and regulatory obligations including the Solicitors Regulation Authority (SRA) Standards and Regulations, and Principles.

Skills and Experience

Experience with CrowdStrike EDR, Cisco ISE, Mimecast, Tessian or equivalent email DLP, Intune, Entra ID, Active Directory, Palo Alto Firewalls, WAF, Menlo Security.
Deep understanding of Security Frameworks & Compliance PCI‑DSS, ISO 27001, NIST, CIS.
Proficient in networking.

Person Specification