Cyber Security Engineer

PLANET RECRUITMENT SERVICES LTD; Lancashire; Hybrid; GBP 40,000 - 50,000; Full time

Job summary

Planet Recruitment is seeking a hands-on Cyber Security Engineer based in Manchester with hybrid working (2 days in office). The role concentrates on implementing and improving security tooling across the OFG environment, especially Microsoft 365 security, Defender, Intune and Entra ID.

You will translate security requirements into practical controls and support incident remediation and BAU operations. The ideal candidate will have practical experience in Microsoft cloud security, vulnerability

Qualifications

• Experience administering Microsoft 365 security controls.
• Experience with Defender capabilities and alert investigations.
• Experience supporting vulnerability management.
• Experience in security monitoring and incident support.
• Analytical and problem-solving skills.
• Ability to work with IT teams and suppliers.
• Organised, detail-focused and able to balance priorities.

Responsibilities

• Deliver security work packages from the Cyber Security Roadmap.
• Configure and maintain security tooling across the OFG estate.
• Identify and deliver practical security improvements across devices, identities and apps.
• Configure Microsoft 365, Entra ID, Intune and Defender per best practice.
• Support BAU security operations and incident remediation.
• Remediate vulnerabilities and assist in security assessments.
• Produce and maintain technical documentation and runbooks.
• Provide security guidance to IT colleagues and project teams.

Skills

M365 security

Security monitoring

Incident response

Communication

Risk assessment

Tools

Defender for Endpoint

Intune

Entra ID

Microsoft 365 security

Vulnerability management

Job description

Role: Cyber Security Engineer.

Location: Manchester - Hybrid 2 days in office.
Salary: £40k - £50k plus benefits.

JOB PURPOSE:

Our client is seeking a hands-on Cyber Security Engineer to help deliver the Cyber Security Roadmap and improve the security posture of our technology estate. This role will focus on implementing, configuring, maintaining and continuously improving security tooling and controls across OFG, with a particular emphasis on Microsoft 365, endpoint security, identity, productivity tools and wider infrastructure security.

You will play a key role in strengthening cyber security across the business by:

• Delivering technical cyber security projects from the Cyber Security Roadmap, ensuring new controls and capabilities are implemented effectively and handed over into BAU operation.

• Configuring, maintaining and improving OFG's security tools, including Microsoft Defender, Microsoft Intune, Entra ID, Microsoft 365 security and compliance capabilities, endpoint protection, vulnerability management and other security platforms.

• Identifying opportunities to harden systems, reduce risk, improve secure configuration, automate repeatable tasks and strengthen the overall resilience of the OFG technology estate.

Working closely with the Cyber Security Operations Manager, Group Head of Cyber, wider IT teams and external partners, you will help translate security requirements into practical technical controls. You will support project delivery, operational security activities, security improvement initiatives, incident remediation and the ongoing maintenance of secure configurations across the estate.

This is a practical engineering role for someone who is comfortable working across Microsoft cloud security, endpoint management, security monitoring, vulnerability remediation and infrastructure hardening. You will be expected to maintain awareness of the changing threat landscape and proactively recommend improvements that reduce cyber risk across the business.

Key Accountabilities:

• Deliver assigned technical work packages from the Cyber Security Roadmap, ensuring activities are planned, implemented, tested, documented and transitioned into BAU support.

• Implement, configure and maintain security tooling across the OFG estate, including Microsoft Defender, Microsoft Intune, Entra ID, Microsoft 365 security and compliance features, endpoint security, vulnerability management and related platforms.

• Identify, assess and deliver practical security improvements across devices, identities, applications, productivity tools, cloud services and infrastructure.

• Configure and harden Microsoft 365, Entra ID, Intune and Defender capabilities in line with security best practice, risk priorities and agreed standards.

• Support BAU security operations by maintaining security tooling, reviewing alerts, improving detections, remediating weaknesses and ensuring security controls continue to operate effectively.

• Work with IT teams to remediate vulnerabilities, configuration weaknesses, insecure defaults and gaps identified through security monitoring, assessments, audits or incident reviews.

• Support security incidents by providing technical investigation, containment, remediation and evidence gathering where required.

• Produce and maintain technical documentation, configuration standards, operational procedures, implementation notes and support handover materials.

• Provide practical security advice to IT colleagues and project teams, helping ensure security requirements are considered during design, implementation and change activities.

• Support the maintenance of cyber security accreditations, standards and frameworks relevant to the business, including Cyber Essentials, Cyber Essentials Plus, CIS Controls.

• Contribute to continuous improvement by identifying opportunities to automate repeatable tasks, improve monitoring, reduce manual effort and increase the maturity of security operations.

What we're looking for:

• Practical experience administering, configuring or improving Microsoft 365 security controls.

• Experience with Microsoft Defender capabilities, such as Defender for Endpoint, Microsoft 365 Defender, alert investigation, advanced hunting or device security improvement.

• Experience supporting vulnerability management activity, including assessing findings, prioritising remediation, tracking progress and improving secure configuration.

• Experience in security monitoring, alert triage, incident support or technical investigation, with the ability to act as an SME who junior members can elevate to.

• Someone who has good analytical and problem-solving skills, with the ability to investigate issues, identify root causes and recommend practical, risk-based improvements.

• Is confident working with IT colleagues, project teams and suppliers to deliver secure technology change, explain technical risks clearly and support agreed remediation activity.

• Someone organised, detail-focused and able to balance project delivery, BAU security activity and urgent remediation work in a busy environment.

• Ideally have relevant certifications such as Microsoft Security Operations Analyst Associate, Microsoft Azure Security Engineer Associate, CompTIA Security+, CISSP, SSCP or equivalent practical experience.

INDIT

Planet Recruitment acts as an employment agency for permanent recruitment and an employment business for the supply of temporary workers. Planet Recruitment is an Equal Opportunities Employer.

By applying for this role your details will be submitted to Planet Recruitment. Our Candidate Privacy Information Statement explains how we will use your information.

Only candidates with the relevant skills and experience will be contacted after application, if you do not hear back from us within 7 days you have unfortunately been unsuccessful in your application.

Please note that no terminology in this advert is intended to discriminate on the grounds of a person's gender, marital status, race, religion, colour, age, disability or sexual orientation. Every candidate will be assessed only in accordance with their merits, qualifications and abilities to perform the duties of the position.