Cyber Security Engineer

Charles Russell Speechlys; Greater London; Hybrid; GBP 70,000 - 100,000; Full time

Benefits offered by this job

Hybrid working

Job summary

Charles Russell Speechlys seeks a Cyber Security Engineer to join their SecOps team in London hybrid role, focusing on implementing and maintaining security measures, incident response, and transitioning to zero-trust.

You will lead security initiatives, collaborate with the Lead Cyber Security Engineer, support ISO 27001 certification, CIS controls, and work with CrowdStrike, ISE, Mimecast, and other tools to protect the firm's systems.

Qualifications

• CISSP certification required.
• CPSA certification preferred.
• Palo Alto Networks SOC certification desirable.

Responsibilities

• Maintain CrowdStrike EDR and tune SIEM rules.
• Collaborate with network engineers on posture management and firewalls.
• Lead or participate in incident response with root cause analysis and runbooks.
• Monitor threats, analyze alerts, and manage remediation.
• Oversee WAF, DDoS, VPN, and perimeter security.
• Collaborate with third-party testers to identify vulnerabilities.
• Create reports on threats, incidents and responses.

Skills

Cybersecurity

Incident response

Threat monitoring

Security strategy

Policy alignment

Networking

Education

CISSP

CPSA

Palo Alto SOC Certification

Tools

CrowdStrike EDR

Cisco ISE

Mimecast

Tessian

Intune

Entra ID

Active Directory

Palo Alto Firewalls

WAF

Job description

The Cyber Security Engineer will be a vital member of our newly established SecOps team, reporting directly to the Infrastructure Platforms Manager. This position is crucial in implementing and maintaining robust security measures across our infrastructure, as well as managing incident response. The role involves developing, implementing, and sustaining security solutions designed to protect our systems against constantly evolving cyber threats, with a focus on transitioning to a zero-trust operating model. The Cyber Security Engineer will spearhead key security initiatives in collaboration with the Lead Cyber Security Engineer and playing a pivotal role in enhancing our overall security posture. Additionally, the role will support the firm in its pursuit of ISO 27001 certification and the implementation of CIS controls.

Roles and Responsibilities

• Maintenance of the CrowdStrike platform, including configuring EDR policies, tuning SIEM rules, and optimizing the system for performance
• Work with the network engineers to implement posture management i.e. ICE/NAC segmentation/lateral movement control and firewalls
• Proactive collaboration with InfoSec to align CrowdStrike and other key security platforms with our security strategy and policies
• Leading or participating in incident response efforts, conducting root cause analysis, and developing runbooks for incident handling
• Monitoring for security threats, analysing alerts, and responding to incidents using CrowdStrike and other security tools. Conduct vulnerability scans and support remediation and risk mitigation efforts
• Oversee WAF, DDoS, VPN, and perimeter firewalls
• Work with Endpoints team to administer MFA, SSO, PAM, MDM/MAM, and Conditional Access
• Maintain security certificates, encryption keys, and IDS/IPS systems
• Collaborate with third‑party penetration testers to identify, prioritize, and remediate security vulnerabilities
• Creating detailed reports on detected threats, incidents, and response actions, as well as documenting configurations, processes, and runbooks.
• Keeping well-informed of the latest cybersecurity trends, emerging threats, and updates
• Comply with all relevant legal and regulatory obligations including the Solicitors Regulation Authority (SRA) Standards and Regulations, and Principles.

Skills and Experience

Experience in the following technologies

• CrowdStrike EDR
• Cisco ISE
• Mimecast
• Tessian or equivalent email DLP
• Intune, Entra ID, Active Directory
• Palo Alto Firewalls, WAF, Menlo Security
• Deep understanding of Security Frameworks & Compliance PCI-DSS, ISO 27001, NIST, CIS
• Networking

Person Specification

• Certified Information Systems Security Professional - CISSP
• Crest Practitioner Security Analyst – CPSA
• Palo Alto Network Certified Security Operations Professional

Competencies

• Working together
• Integrity and respect
• Inclusive
• Personal impact and growth
• Driving high standards
• Commercial mindset
• Client - centric
• Responsible Business

Hybrid working - We adopt a hybrid and flexible working approach, dependent on the requirements of the role and subject to manager approval.

For a detailed specification please download the job description in the documents section of this page.