Cyber Security Engineer

Gravitas Group; Greater London; Hybrid; GBP 45,000 - 75,000; Full time

Job summary

Gravitas Group in London is seeking a Cyber Security Engineer to lead and implement security controls across the organisation. This 12-month FTC focuses on hardening the security posture, delivering projects, and ensuring systems remain secure, resilient and compliant.

You will own vulnerability management, incident triage, and threat detection using Microsoft Defender, Entra ID/AD, and SIEM with KQL. The role offers hybrid working (1 day per week in South London) with potential to move into a

Qualifications

• Practical cyber security engineering or operations experience.
• Strong grounding in vulnerability management, incident response, and security operations.
• Microsoft security experience, Defender and identity/security controls.
• SIEM experience; ability to write or work with queries (KQL desirable).
• Self-sufficient, curious, and focused on improving processes.

Responsibilities

• Vulnerability management, remediation planning, reporting, and automation.
• Security incident triage, investigation, and response.
• Microsoft Defender, Entra ID/Active Directory, Conditional Access controls.
• SIEM query building and KQL.
• Ransomware resilience, including backup and network segmentation.

Skills

Vulnerability management

Incident response

Security operations

SIEM

Identity security controls

Tools

Microsoft Defender

Entra ID

Active Directory

KQL

Job description

Cyber Security Engineer

12-Month FTC | Up to c. £75,000 | Hybrid: 1 day/week in South London

We are currently partnering with a client who are seeking a Cyber Security Engineer to help drive several key security initiatives across the organisation. This is an exciting opportunity to join a growing technology function and play a pivotal role in enhancing the company's security posture, supporting the delivery of security projects, and ensuring systems, applications and infrastructure remain secure, resilient and compliant.

Working closely with technical and business stakeholders, you will contribute to the design, implementation and continuous improvement of security controls, processes and technologies across the wider estate.

Why this role?

• Own a key security capability: Take the lead on vulnerability management and help define what "good" looks like.
• Work on real transformation: Contribute to ransomware resilience, network and backup segmentation, and Cyber Essentials Plus.
• Build modern security capability: Support automation, ServiceNow integration, remediation workflows, and security maturity improvements.
• Get exposure to AI security: Work around Copilot, AI agents, Purview, and data security compliance.
• Broad technical remit: Microsoft security, SIEM, incident response, cloud/SaaS security, identity, and network security.
• Room to grow: The team is investing in capability, and strong performers may have scope to extend their contract or move into future permanent roles.

The Opportunity

You’ll support the day-to-day running of cyber security while leading improvements across the vulnerability management programme. You’ll be trusted to work independently, prioritise a varied workload, and bring ideas from your own experience.

Key areas include:

• Vulnerability management, remediation planning, reporting, and automation.
• Security incident triage, investigation, and response.
• Microsoft Defender, Entra ID/Active Directory, Conditional Access, and related controls.
• SIEM query building and KQL.
• Ransomware resilience, including backup and network segmentation.
• Cyber Essentials Plus and wider security maturity initiatives.
• AI, Copilot, Purview, and data security governance.

What We're Looking For

• Practical cyber security engineering or operations experience.
• Strong grounding in vulnerability management, incident response, and security operations.
• Microsoft security experience, especially Defender and identity/security controls.
• SIEM experience and confidence writing or working with queries. KQL is desirable.
• Someone who is self-sufficient, curious, and comfortable improving processes rather than simply following them.
• CompTIA Security+ or an equivalent baseline certification.

Package

• Up to c. £75,000
• 12-month fixed-term contract
• Hybrid: 1 day per week in South London
• Strong potential to move into a permanent role