Cyber Security Engineer

Comtecs Group; Greater London; Hybrid; GBP 90,000 - 100,000; Full time

Benefits offered by this job

Bonus

Benefits

Job summary

Comtecs Group is recruiting for a Global Law Firm in London seeking an IT Cyber Security Specialist to own security controls and architecture across a complex global IT environment.

The role covers incident response, threat monitoring and vulnerability management with hands-on engineering using MS Defender and MS Sentinel in a hybrid London setting. Competitive package and bonus available.

Qualifications

• Extensive experience in a security role blending infrastructure with cloud engineering.
• Strong knowledge of modern security architecture, threat prevention and incident response.
• Experience with Windows Server and Azure cloud infrastructure.

Responsibilities

• Continuously improve the firm’s cybersecurity posture across infrastructure.
• Identify, assess and remediate vulnerabilities in hardware, software and cloud.
• Lead incident response investigations and mitigate security incidents.
• Evaluate and implement security enhancements and threat prevention technologies.
• Collaborate with third‑party suppliers on security measures.

Skills

Incident response

Threat monitoring

Vulnerability management

Security architecture

Security controls

Education

Security certifications (CISSP, CEH, CCNA Security, AZ-500, SC-100/SC-200)

Tools

MS Defender

MS Sentinel

Azure Cloud

Windows Server

Job description

IT Cyber Security Specialist / Cyber Security Engineer - CISSP, CEH, AZ-500, SC-100, CCNA Security, Incident Response, Threat Monitoring, Vulnerability Management, Security Architecture, Azure, Windows Server Infrastructure. Permanent. London Hybrid. c.£90k - £100k + Bonus +Benefits

Global Law Firm seeks an experienced Cyber Security Specialist to join its Infrastructure Engineering team, supporting and continually improving cybersecurity across a global IT environment.

**NOTE: This vacancy is offered by the IT Recruitment Division of Comtecs and is based within a Law Firm whose HQ is in London.**

Reporting to the Infrastructure Engineering Manager, you'll take ownership of cybersecurity controls and security architecture while working closely with Infrastructure Operations and other technology teams to identify vulnerabilities, respond to incidents and strengthen the firm's overall security posture.

This is a hands-on technical role covering Cyber Security Engineering, Incident Response, Threat Monitoring, Vulnerability Management and Security Architecture (Infrastructure focussed) using tools such as MS Defender and MS Sentinel. You'll work across a complex infrastructure environment, identifying and mitigating security risks, supporting major cyber incidents and contributing to strategic security and infrastructure projects. You'll also help develop security awareness, business continuity capabilities and ongoing improvements to the firm's security controls.

Key Responsibilities:

• Continuously review and improve the firm's cybersecurity posture from an infrastructure perspective and external security rating.
• Identify, assess and remediate vulnerabilities across hardware, software and infrastructure (Windows Server and Azure Cloud).
• Monitor emerging threats and lead or support Incident Response investigations and mitigation.
• Evaluate, test and recommend security enhancements, controls and threat prevention technologies.
• Identify security risks and exposures and develop measures to prevent future incidents.
• Lead CE+ accreditation and support security, risk and data protection requirements from a technical (Not GRC) perspective.
• Participate in and lead infrastructure lifecycle, security and technology projects.
• Provide 3rd Line / Major Incident support as a cybersecurity subject matter expert.
• Work with third-party suppliers and advise internal technical teams on security measures to resolve security and infrastructure issues.

We're looking for experienced Cyber Security engineer with strong technical infrastructure knowledge and proven experience across incident response, threat monitoring and vulnerability management. You will possess:

• Extensive experience in a similar role blending Cyber Security with core Wintel Infrastructure and Azure cloud engineering.
• Strong knowledge of modern security architecture, threat prevention techniques and incident response.
• Strong Windows Server 2016/2019/2022 knowledge including Active Directory, DNS, DHCP, Intune, Group Policy, PKI, Entra and Azure SSO.
• Demonstrable experience across Cyber Security, Incident Response, Threat Monitoring and Vulnerability Management using tools such as MS Sentinel, MS Defender etc for threat hunting, vulnerability monitoring and security posture improvement.
• CISSP, CEH, CCNA Security, AZ-500, SC-100, SC-200 or equivalent security certification.
• Experience designing, integrating and managing complex infrastructure and cloud solutions from a cyber security standpoint and advising technical infrastructure teams on security focussed designs and operations
• Strong communication skills with the ability to explain complex security issues to technical and non-technical audiences.
• Experience working with third-party providers across on-premise and cloud services.
• Strong planning skills and knowledge of ITIL processes and best practice.

This is an excellent opportunity to join a highly regarded global organisation where you'll play a key role in strengthening cybersecurity across a complex international IT environment, combining hands-on security engineering, incident response and strategic infrastructure projects.