Cyber Security Engineer

REX Cyber Security; Leeds; On-site; GBP 70,000 - 84,000; Full time

Benefits offered by this job

Up to 20% bonus

Comprehensive benefits package

Job summary

REX Cyber Security is recruiting a Cyber Security Engineer for a leading international law firm in the United Kingdom. This hands-on role focuses on security operations, threat detection, incident response and continuous improvement across cloud, endpoints, identity and data environments.

You will work with Microsoft Sentinel, Security Copilot and AI-driven tooling to enhance detection and response. Collaboration with IT and outsourced SOC/MDR providers will be key as you embed security into

Qualifications

• Hands-on experience in security operations, detection and incident response.
• Proficient with Microsoft Sentinel in production environments.
• Familiar with Microsoft Security Copilot or similar AI-assisted security tech.
• Experience managing outsourced SOC/MDR providers.
• Understanding of modern cyber threats and cloud security.
• Experience across Microsoft Azure security environments.
• Knowledge of detection engineering, alert tuning and investigation workflows.
• Knowledge of security frameworks, controls and governance.
• Strong analytical and communication skills.

Responsibilities

• Support security monitoring, detection, investigation and incident response.
• Refine detection logic in Microsoft Sentinel and tune alerts.
• Use AI-assisted tooling to improve investigation and triage.
• Design AI-driven tooling to enhance threat detection and response.
• Identify emerging threats including ransomware and AI-driven attacks.
• Collaborate with outsourced SOC/MDR to improve monitoring and service quality.
• Develop incident response playbooks and security automation.
• Support security across Azure, endpoints, identity, and data environments.
• Embed security into technology delivery with cross-team collaboration.
• Support audit, compliance and client security assurance requirements.

Skills

Cyber security operations

Incident response

Threat detection

Azure security

Detection engineering

Communication

Analytical thinking

Education

Security+ or equivalent

SC-200

AZ-500

SSCP

CySA+

Tools

Microsoft Sentinel

Microsoft Security Copilot

AI-assisted security tools

SOC/MDR management

Job description

£70,000 per annum + up to 20% Bonus & Comprehensive Benefits Package

We are working with a leading international law firm looking to appoint a Cyber Security Engineer to join its growing Cyber Security function.

This is a hands-on technical role with a strong focus on security operations, threat detection, incident response and continuous improvement. You will help protect the firm's systems, infrastructure and highly sensitive client data, while improving security capabilities across cloud, endpoint, identity and data environments.

The role offers the opportunity to work with modern Microsoft security technologies, including Microsoft Sentinel and Security Copilot, while also playing a key role in how the firm responds to emerging threats, particularly those associated with AI, automation and agentic technologies.

The Role

Working closely with senior members of the Cyber Security team and the wider IT function, you will help strengthen the firm's operational security capability and ensure security is embedded across technology decisions and platform change.

You will be involved across both proactive security improvement and reactive incident response, working alongside infrastructure, cloud, data and architecture teams as well as the firm's outsourced SOC/MDR provider.

Key responsibilities will include:

• Supporting security monitoring, detection, investigation and incident response
• Developing and refining detection logic within Microsoft Sentinel, including alert tuning and improving investigation workflows
• Using Microsoft Security Copilot and AI-assisted technologies to improve investigation, triage and analysis
• Designing and implementing AI-driven tooling and automation to enhance threat detection, incident response and security operations
• Identifying emerging threats, including ransomware, identity-based attacks, cloud vulnerabilities and AI-driven attack techniques
• Supporting complex and high-severity security investigations
• Working closely with the firm's outsourced SOC/MDR provider to improve monitoring, response and overall service quality
• Developing and improving incident response processes, playbooks and security automation
• Supporting security across Azure, endpoint, identity and data environments
• Contributing to the design and implementation of practical cyber security solutions
• Working with Infrastructure, Data, Architecture and Service Management teams to embed security into technology delivery
• Supporting audit, compliance and client security assurance requirements

What we're looking for

We are looking for a technically strong cyber security professional with hands-on experience across security operations, detection and incident response.

You should have:

• Strong experience within cyber security operations, incident response, threat detection or a similar technical security role
• Hands-on experience with Microsoft Sentinel in a production environment
• Good knowledge of Microsoft Security Copilot or similar AI-assisted security technologies
• Experience working with or managing an outsourced SOC or MDR provider
• Strong understanding of modern cyber threats, including ransomware, identity attacks, cloud security risks and emerging AI-driven threats
• Experience working across Microsoft Azure security environments
• Knowledge of detection engineering, alert tuning and investigation workflows
• Experience developing incident response processes and playbooks
• Good understanding of security frameworks, controls and governance
• Strong analytical and problem-solving skills
• The ability to communicate technical security risks clearly to both technical and non-technical stakeholders
• Relevant industry certifications such as Security+, SC-200, AZ-500, SSCP, CySA+ or equivalent would be highly valued.

This is an opportunity to join a leading international law firm and play an important role in the continued development of its cyber security capability.

You will have exposure to sophisticated security challenges, modern Microsoft security technologies and emerging areas such as AI-driven security operations and agentic threats, while working in an environment where cyber security is considered a critical business priority.

The role offers a strong balance between hands-on technical security, incident response, security engineering and longer-term capability improvement, with the opportunity to have a genuine impact on how security evolves across the firm.