Cyber Security Engineer

DVF Recruitment; Greater London; Hybrid; GBP 77,000 - 80,000; Full time

Job summary

DVF Recruitment is seeking a Cyber Security Engineer for a leading international law firm in London, adopting a hybrid work pattern. You will join a newly established SecOps function and shape security across a globally connected organisation.

You will own threat detection and incident response, optimise CrowdStrike EDR, work with Palo Alto firewalls and IAM tools, and contribute to ISO 27001 initiatives while collaborating with stakeholders.

Qualifications

• Solid hands-on experience with CrowdStrike EDR, central to the role.
• Experience across Palo Alto firewalls, Cisco ISE, Entra ID / Active Directory, Intune, Mimecast, and Menlo Security.
• Proven track record in incident response and vulnerability management.
• Understanding of security frameworks ISO 27001, NIST, CIS, PCI-DSS.

Responsibilities

• Maintaining and optimising the CrowdStrike EDR platform, configuring policies, tuning SIEM rules, managing performance
• Working with network engineers on posture management including NAC segmentation, lateral movement controls, and firewalls (Palo Alto)
• Leading and participating in incident response, root cause analysis, runbook development, and live incident handling
• Vulnerability scanning, threat monitoring, alert triage, and remediation support
• Managing WAF, DDoS, VPN, and perimeter firewall environments
• Supporting MFA, SSO, PAM, MDM/MAM, and Conditional Access alongside the Endpoints team
• Collaborating with third-party penetration testers on vulnerability identification and remediation
• Contributing to ISO 27001 certification and CIS controls implementation

Skills

CrowdStrike EDR

Palo Alto firewalls

Cisco ISE

Entra ID / Active Directory

Intune

Mimecast

Menlo Security

Incident response

Vulnerability management

Job description

Cyber Security Engineer | Leading International Law Firm | London (Hybrid)

£77,000 (£80k for the right expertise)

A well-regarded international law firm with a global presence is looking for a Cyber Security Engineer to join their newly established SecOps function. This is a rare opportunity to get in at the ground level of a security team being built with real intent as the firm go into a growth phase

Why this role is worth a look

The firm is mid-way through two significant security initiatives, a zero-trust operating model transition and ISO 27001 certification. You won't be maintaining someone else's work. You'll be shaping how security actually operates across a complex, internationally connected organisation.

The tech stack is serious. The roadmap is clear. And the leadership team knows what good looks like.

What you'll be doing

• Maintaining and optimising the CrowdStrike EDR platform, configuring policies, tuning SIEM rules, managing performance
• Working with network engineers on posture management including NAC segmentation, lateral movement controls, and firewalls (Palo Alto)
• Leading and participating in incident response, root cause analysis, runbook development, and live incident handling
• Vulnerability scanning, threat monitoring, alert triage, and remediation support
• Managing WAF, DDoS, VPN, and perimeter firewall environments
• Supporting MFA, SSO, PAM, MDM/MAM, and Conditional Access alongside the Endpoints team
• Collaborating with third-party penetration testers on vulnerability identification and remediation
• Contributing to ISO 27001 certification and CIS controls implementation

What they need from you

• Solid hands-on experience with CrowdStrike EDR, this is central to the role
• Experience across Palo Alto firewalls, Cisco ISE, Entra ID / Active Directory, Intune, Mimecast, and Menlo Security
• Proven track record in incident response and vulnerability management, not just tooling knowledge
• Understanding of security frameworks, ISO 27001, NIST, CIS, PCI-DSS
• Strong communication skills, you'll be engaging with stakeholders at all levels, not just the security team
• A collaborative working style, this is a small, newly formed team and culture fit genuinely matters

Desirable:

CISSP, CPSA, or Palo Alto NCSP certification

The detail

London (Hybrid)

Cyber Security Engineer

Leading International Law Firm

Up to £77,000 (flexibility to £80,000 for the right profile)

Permanent