Cyber Security Engineer

Nigel Wright Recruitment; Newcastle upon Tyne; On-site; GBP 42,000 - 65,000; Full time

Job summary

Nigel Wright Recruitment is seeking a proactive Cyber Security Engineer to strengthen the organisation’s security posture across on-premises, cloud, and hybrid environments. You will work as an internal cyber security SME within a collaborative IT function, balancing security priorities with day-to-day IT operations.

You will monitor security events, respond to incidents, and work with a third-party MDR provider while contributing to continuous improvement and secure configuration practices.

Qualifications

• Experience with Microsoft-centric environments (M365, Azure, Intune, security baselines).
• Knowledge of compliance frameworks (NCSC guidance, Cyber Essentials).
• Understanding of MITRE ATT&CK, encryption and secure configuration principles.
• Ability to manage workload while driving improvements.

Responsibilities

• Monitor, investigate, and respond to security alerts and incidents with MDR support.
• Lead remediation on escalated incidents with clear communication.
• Develop and enhance threat detection rules and use cases.
• Implement security controls across Microsoft 365, Azure, and hybrid infra.
• Support IT service desk and infrastructure tasks as needed.
• Contribute to ticket triage, prioritisation, resolution and escalation.

Skills

M365/Azure

MITRE ATT&CK

Cyber Essentials

IAM

Strong communication

Education

Cyber security degree/cert

Job description

An established organisation in the North East is seeking a proactive, hands-on Cyber Security Engineer to strengthen its security posture and lead day-to-day cyber protection across its systems, networks, and cloud environment.

As the organisation’s internal cyber security SME, you will have the opportunity to shape improvements and enhance resilience, working closely with colleagues across IT and the wider business.

This is a predominantly site based role so applicants must reside within a commutable distance of the office.

Our client is unable to sponsor visas so candidates must have a permanent right to work in the UK

The Role

Joining a close-knit and highly collaborative IT function, you will play a key role in protecting the organisation’s infrastructure while working as part of a small, multi-skilled team delivering day-to-day IT services. Alongside your cyber security responsibilities, you will support operational IT activity through the service desk, responding to tickets, assisting users, and contributing to the smooth running of Microsoft 365, Azure, infrastructure, and hybrid environments.

Working alongside IT colleagues and a third-party MDR provider, your work will combine security monitoring, incident response, continuous improvement, ticket-based support, and broader departmental requirements. This is a varied, hands-on role suited to someone who enjoys teamwork, shared ownership, and balancing cyber security priorities with the everyday needs of a busy IT department.

Key Responsibilities

• Monitor, investigate, and respond to security alerts and potential incidents, working closely with colleagues and the MDR provider.
• Lead security remediation activity on escalated MDR incidents, coordinating technical resolution and clear communication across the IT team and wider business.
• Develop and enhance threat detection rules and use cases in collaboration with internal stakeholders and third-party partners.
• Implement and maintain security controls across Microsoft 365, Azure, and hybrid infrastructure, ensuring changes are understood, documented, and communicated effectively.
• Support the day-to-day running of the IT department by handling service desk tickets, troubleshooting user issues, and assisting with infrastructure, desktop, and application support.
• Contribute to ticket triage, prioritisation, resolution, and escalation, helping maintain high standards of service and ensuring colleagues receive timely support.
• Support secure configuration, IAM, cloud environments, patch management, and application security testing as part of wider operational and improvement activity.
• Ensure compliance with standards such as Cyber Essentials, ISO 27001, SOC 2, and GDPR, working collaboratively to embed best practice into everyday IT processes.
• Play a key role during high-pressure incidents, supporting both technical resolution and stakeholder communication as part of a coordinated team.
• Collaborate with third-party suppliers to drive compliance with best practices, improve service quality, and support continuous improvement across IT operations.
• Participate in an IT on-call rota.

The Person

You’ll be an experienced, confident cyber security practitioner who is comfortable acting as the standalone specialist within a small team. You’ll bring a strong technical foundation and an ability to work across hybrid and legacy environments.

With a background in infrastructure or networking, you will possess:

• Strong experience with Microsoft-centric environments (M365, Azure, Intune, security baselines).
• Knowledge of compliance frameworks (NCSC guidance, Cyber Essentials), MITRE ATT&CK, encryption, IAM and secure configuration principles.
• The ability to manage operational workload while progressing ongoing improvement initiatives.
• Strong communication and stakeholder-engagement skills, making complex risks easy to understand.

A degree or cyber security certification is beneficial but not essential.

Applicants who currently undertake a broad infrastructure role that includes cyber security responsibilities looking to specialise in that area, are also welcomed.