Cyber Security Engineer

The Methodist Church in Britain; North East; On-site; GBP 45,000 - 65,000; Full time

Benefits offered by this job

26 days annual leave rising to 31

Birthday leave

Occupational pension

Health cash plan

Flexible benefits pot

Funding for qualifications, learning &

Agile working

Job summary

Karbon Homes is recruiting a permanent Cyber Security Engineer for its Cloud Infrastructure and Security team. The role focuses on security monitoring, incident response, vulnerability management and secure cloud/endpoint design, with office-based work and travel to North East sites.

Candidates should gain a recognised cyber certification within 12 months of starting and will work across ICT, project teams and external partners to promote a strong security culture.

Qualifications

• Hands-on experience in cyber security or security engineering.
• Experience in security incident detection, response and recovery.

Responsibilities

• Provide technical leadership across security monitoring, threat detection and incident response.
• Lead vulnerability management, patching and endpoint security improvements.
• Influence secure network, cloud and endpoint design across technology change.
• Support cyber governance, reporting, audit readiness and compliance assurance.
• Champion cyber awareness and promote a strong security culture.
• Embed security best practice into day-to-day operations and future technology change.
• Improve security policies, controls and awareness.
• Work with colleagues across ICT, project teams and external partners.
• Collaborate with suppliers to drive change.
• Engage stakeholders in agile product planning and requirements, and document and hand over to support

Skills

Security monitoring

Threat detection

Incident response

Vulnerability management

Endpoint security

Cloud environments

Risk translation

Stakeholder relations

Security policies

Tools

Firewalls

IDS/IPS

EDR

SIEM

Microsoft Defender

Vulnerability tools

Job description

Karbon Homes' ICT & Digital Transformation team is recruiting a permanent Cyber Security Engineer for its Cloud Infrastructure and Security team. The post protects systems, data and services through security monitoring, incident response, vulnerability management and patching, and builds security into network, cloud and endpoint change. It is office-based through the week, with regular travel to other North East sites, and centres on Microsoft Azure environments. Candidates without a recognised cyber certification must gain one within 12 months of starting.

What the job involves

• Provide technical leadership across security monitoring, threat detection and incident response
• Lead vulnerability management, patching and endpoint security improvements
• Influence secure network, cloud and endpoint design across technology change
• Support cyber governance, reporting, audit readiness and compliance assurance
• Champion cyber awareness and promote a strong security culture
• Embed security best practice into day-to-day operations and future technology change
• Improve security policies, controls and awareness
• Work with colleagues across ICT, project teams and external partners
• Collaborate with suppliers to drive change
• Engage stakeholders in agile product planning and requirements, and document and hand over to support

What’s required

Experience

• Hands-on experience in cyber security or security engineering
• Experience in security incident detection, response and recovery

Skills & knowledge

• Strong understanding of enterprise security technologies such as firewalls, IDS/IPS, EDR, SIEM, Microsoft Defender and vulnerability management tools
• Confidence working with cloud environments
• Translating security risks into clear business impact
• Responding under pressure
• Building trusted relationships with colleagues and senior stakeholders

Checks & eligibility

• Basic disclosure and barring check

Nice to have

• Experience with Microsoft Azure
• Relevant cyber security certification such as Microsoft SC-200, SC-300, AZ-500, SC-100, ISC2 SSCP, CCSP or CISSP
• Certification to be achieved within 12 months of starting, if not already held

What’s offered

• 26 days annual leave, rising to 31 after 3 years
• Birthday leave
• Occupational pension
• Health cash plan
• Flexible benefits pot
• Funding for qualifications, conferences and learning events
• Agile working