Cyber Security Engineer

Jobtailor; Greater London; Hybrid; GBP 70,000 - 110,000; Full time

Job summary

Jobtailor is seeking a seasoned cyber security professional to join our security operations team in a hybrid UK role. You will monitor alerts, investigate incidents, and coordinate containment and recovery while supporting vulnerability management and risk reporting.

You will help with AI governance, audits, and ongoing ISMS improvements. The candidate will bring strong analytical skills, excellent communication, and a practical grasp of ISO 27001, NIST CSF, and GDPR considerations, plus

Qualifications

• Essential degree in Cyber Security, Information Technology, Computer Science, or equivalent experience.
• Experience investigating security incidents and working with SOC environments.
• Strong knowledge of ISO 27001, NIST CSF, and Cyber Essentials Plus.

Responsibilities

• Monitor security alerts and incidents, coordinating containment and recovery activities.
• Support vulnerability management and risk assessment programmes.
• Review security policies and assist with audits and governance.

Skills

Cyber security

Information security

Security operations

ISO 27001

NIST CSF

Risk management

Incident investigation

Microsoft security tech

Networking & cloud

Communication skills

Education

Degree in Cyber Security / IT / CS

Tools

Microsoft Sentinel

Microsoft Defender

Microsoft Purview

Job description

• Monitor security alerts and events from security monitoring platforms and managed SOC providers
• Investigate and respond to security incidents, coordinating containment, eradication, and recovery activities
• Support vulnerability management, remediation tracking, and reporting
• Assist with threat intelligence gathering and analysis
• Maintain and improve the Information Security Management System (ISMS)
• Conduct security risk assessments and maintain risk registers
• Assist with ISO 27001, Cyber Essentials, and client assurance audits
• Review and update security policies, standards, and procedures
• Support secure adoption and governance of AI technologies
• Conduct security and privacy risk assessments for AI platforms and third-party AI providers
• Evaluate AI solutions against security, privacy, regulatory, and ethical requirements
• Develop and maintain AI governance policies and acceptable-use requirements
• Monitor AI-related threats, vulnerabilities, and regulatory developments
• Support controls preventing unauthorised AI use and confidential-information exposure
• Guide users on secure and responsible use of Generative AI, including Microsoft Copilot
• Perform third-party supplier security reviews and due diligence
• Review security questionnaires and assess supplier risks
• Monitor third-party security compliance
• Support security awareness programmes and phishing simulations
• Develop employee guidance and educational materials
• Support cyber incident investigations and post-incident reviews
• Maintain incident response documentation and playbooks
• Participate in incident response exercises and tabletop testing
• Assist with business continuity and disaster recovery planning
• Support deployment and management of Microsoft Purview, Microsoft Defender, Microsoft Sentinel, Microsoft Entra ID, email security solutions, endpoint protection technologies, and vulnerability management platforms
• Assist with security configuration reviews and hardening
• Produce security metrics, dashboards, and management reports
• Communicate technical security issues to technical and non-technical audiences
• Recommend improvements to security controls and risk reduction

Requirements

• Strong experience in a cyber security, information security, or security operations role
• Good understanding of ISO 27001
• Good understanding of NIST Cyber Security Framework
• Good understanding of Cyber Essentials Plus
• Good understanding of risk management methodologies
• Experience investigating security incidents
• Knowledge of Microsoft 365 security technologies
• Understanding of networking, operating systems, cloud technologies, and identity management
• Strong analytical and problem-solving skills
• Excellent written and verbal communication skills
• Experience with Microsoft Sentinel and Defender XDR is desirable
• Experience with third-party risk management is desirable
• Knowledge of GDPR and data protection requirements is desirable
• Experience working with managed SOC providers is desirable
• Exposure to security awareness and phishing simulation programmes is desirable
• Essential degree in Cyber Security, Information Technology, Computer Science, or equivalent experience
• CISSP, SSCP, CompTIA Security+, or Microsoft Security Certifications (SC-200, SC-300, SC-100) are desirable
• Self-motivated and proactive
• Strong attention to detail
• Able to prioritise and manage multiple activities simultaneously
• Collaborative team player with a customer-focused approach
• Strong commercial awareness and ability to balance security with business objectives
• Passionate about staying current with emerging threats and technologies

Core Competencies

Demonstrates expertise in Cyber Security and Information Security Management, with a strong focus on risk management, incident response, and compliance with ISO 27001 and NIST Cyber Security Framework. Proficient in utilizing Microsoft security technologies and managing third-party security risks while fostering a culture of security awareness.

Highest-signal resume keywords

• Cyber Security Experience
• ISO 27001 Understanding
• Microsoft Sentinel Proficiency
• Risk Management Methodologies
• Incident Response Coordination

ATS Optimization Keywords

Hard Skills

• Security Incident Investigation
• Vulnerability Management
• Threat Intelligence Analysis
• Security Risk Assessment
• Security Policy Development
• AI Governance Policies
• Security Metrics Production
• Third-Party Risk Management
• GDPR Knowledge
• Networking and Cloud Technologies

Soft Skills

• Analytical Problem-Solving
• Excellent Communication
• Attention to Detail
• Self-Motivated
• Collaborative Team Player

Certifications & Qualifications

• CISSP
• SSCP
• CompTIA Security+
• Microsoft Security Certifications (SC-200, SC-300, SC-100)

Industry Keywords

• NIST Cyber Security Framework
• Cyber Essentials Plus
• Information Security Management System (ISMS)
• Security Awareness Programs
• Phishing Simulations

Tools & Technologies

• Microsoft Purview
• Microsoft Defender
• Microsoft Sentinel
• Email Security Solutions
• Endpoint Protection Technologies
• Vulnerability Management Platforms