Cyber Security Engineer

Proactive Appointments; Northampton; Hybrid; GBP 60,000 - 90,000; Full time

Benefits offered by this job

Excellent benefits package

Hybrid work model

Job summary

Proactive Appointments is seeking a Cyber Security Engineer in Northampton with hybrid work options (3 days on-site per week) for a permanent role. You will strengthen security across identity, endpoints, cloud services and business applications, and work with IT ops, development and platform teams.

The ideal candidate has 5+ years in cybersecurity, hands-on experience with IAM, EDR/EDR-like tools, vulnerability management and incident response, and a proven ability to translate security into

Qualifications

• 5+ years in cybersecurity, infrastructure security or related field.
• Experience securing enterprise IAM, MFA and conditional access.
• Experience with Windows endpoints and modern device management.
• Experience with EDR/EDR-like security technologies and vulnerability remediation.
• Knowledge of cloud security concepts and secure configurations.
• Ability to write technical documentation and risk summaries.

Responsibilities

• Maintain and improve security controls across identity, endpoint, cloud and business apps.
• Review authentication and privileges, promoting least-privilege and zero-trust.
• Improve endpoint security and device compliance.
• Collaborate with IT operations to address security weaknesses.
• Review cloud services for risks and excessive access.
• Support development and platform teams in secure design and delivery.
• Operate vulnerability and exposure-management processes.
• Coordinate remediation with system owners and verify actions.
• Investigate security alerts and incidents with internal and external teams.
• Maintain incident response procedures and escalation routes.
• Participate in incident exercises and post-incident reviews.
• Review SaaS security, third-party integrations and data sharing.
• Produce reporting on risks, incidents and remediation progress.
• Support audits and compliance activities.
• Develop technical security standards and procedures.

Skills

Cybersecurity

Identity & access

Endpoint security

Cloud security

Vulnerability management

Incident response

Zero-trust

Least privilege

Tools

EDR tools

Threat detection

Cloud security tools

Scripting (PowerShell/Python)

Job description

Cyber Security Engineer

Northampton | Hybrid (3 days on–site per week) | Permanent | Excellent Benefits Package

Our client are looking for an experienced Cyber Security Engineer to join their team on a permanent basis. You'll help with strengthening the security of a broad technology environment and help embed effective security practices across a growing organisation. This role covers identity and access management, endpoint security, cloud platforms, business applications, vulnerability management and incident response. You will work closely with IT operations, development and platform teams, as well as selected external security providers.

Responsibilities

• Maintain and improve security controls across identity, endpoint, cloud and business application environments.
• Review authentication, access and administrative privileges, promoting least–privilege and zero–trust principles.
• Improve endpoint security, device compliance, secure configuration and protection against malicious activity.
• Work with IT operations to address security weaknesses in workplace technology and supporting infrastructure.
• Review cloud services and hosted workloads for security risks, configuration weaknesses and excessive access.
• Support development and platform teams in incorporating security into technical designs and delivery processes.
• Operate and improve the organisation's vulnerability and exposure–management processes.
• Coordinate remediation activity with internal system owners and confirm that corrective actions are effective.
• Investigate security alerts and incidents, coordinating with internal teams and external security specialists.
• Maintain practical incident–response procedures, escalation routes and supporting documentation.
• Participate in incident exercises and post–incident reviews, ensuring that lessons result in measurable improvements.
• Review the security of SaaS applications, third–party integrations and data–sharing arrangements.
• Produce clear reporting on security risks, incidents, vulnerabilities and remediation progress.
• Support audits, customer assurance requests and relevant compliance activities.
• Develop technical security standards, operating procedures and guidance.

Experience Required:

• 5 years of relevant experience in cybersecurity, infrastructure security, cloud security or a closely related technical role
• Practical experience securing enterprise identity, productivity and collaboration services.
• A good understanding of identity and access management, multifactor authentication, conditional access and privileged access.
• Experience securing and managing Windows endpoints through a modern device–management platform.
• Experience using endpoint detection and response, extended detection and response, or comparable security technologies.
• Practical experience assessing, prioritising and coordinating the remediation of vulnerabilities.
• Working knowledge of public–cloud security concepts, including identity, networking, logging, data protection and secure configuration.
• An understanding of common attack techniques and appropriate preventative and detective controls.
• Experience investigating security events or supporting incident response.
• The ability to evaluate technical findings and recommend proportionate, achievable improvements.
• The ability to write clear technical documentation, incident records and risk summaries.
• Strong communication skills and the ability to work effectively with technical and non–technical colleagues.

Desired experience:

• Experience working with an external security operations or managed detection and response provider.
• Experience implementing or improving a vulnerability–management platform.
• Familiarity with cloud–native security monitoring and configuration–management services.
• Experience securing SaaS applications and third–party integrations.
• Knowledge of email security, information protection and data–loss prevention.
• Experience using Scripting or automation to improve security operations.
• An understanding of network security and the protection of office–based technology.
• Experience supporting penetration tests, audits or security certification activities.
• Familiarity with recognised frameworks such as ISO 27001, Cyber Essentials, NIST CSF or CIS Controls.
• A relevant technical certification in security, identity, cloud or endpoint management.
• Experience introducing security checks into software–development and deployment processes.

Due to the volume of applications received for positions, it will not be possible to respond to all applications and only applicants who are considered suitable for interview will be contacted.

Proactive Appointments Limited operates as an employment agency and employment business and is an equal opportunities organisation

We take our obligations to protect your personal data very seriously. Any information provided to us will be processed as detailed in our Privacy Notice, a copy of which can be found on our website