Cyber Security Engineer

VIQU Ltd; Metropolitan Borough of Solihull; On-site; GBP 50,000 - 90,000; Full time

Job description

VIQU are working with a leading organisation in financial verification and analytical services, who are looking to hire a Cyber Security Engineer. The Cyber Security Engineer will be responsible for safeguarding the Azure environment and custom web applications, managing end–user security, and ensuring compliance with ISO 27001, GDPR, and SOC2.

Key responsibilities of the Cyber Security Engineer:

• Design, deploy, and manage security measures for the Azure Infrastructure and bespoke web applications.
• Implement and configure Microsoft security tools, including Defender, Azure Security Centre, and Active Directory security policies.
• Monitor and investigate security incidents, ensuring swift resolution to incidents.
• Maintain compliance with ISO 27001, GDPR and SOC2 by developing security policies, conducting audits, and managing risk assessments.
• Conduct in–depth vulnerability assessments, penetration testing, and security reviews to identify and remediate weaknesses.
• Partner with development teams to integrate secure coding practices.
• Drive security initiatives and deliver cybersecurity training to strengthen security culture.

Key Requirements for the Cyber Security Engineer:

• Extensive experience in cybersecurity, particularly in protecting Azure cloud–based environments and securing web applications.
• Proficiency in Microsoft technologies, including Azure and Active Directory, with a strong understanding of endpoint protection solutions, including Microsoft Defender.
• Familiarity with regulatory frameworks and security standards such as ISO 27001, SOC2, and GDPR.
• Possess relevant industry certifications eg CISSP, CEH and Azure Security Engineer (desired).
• Deep knowledge of cybersecurity principles, including threat detection, incident response, and vulnerability management.
• Experienced in leading security initiatives and overseeing security projects from planning to execution.
• Strong communicator, capable of effectively engaging with technical and non–technical stakeholders to drive security awareness.