Cyber Security Engineer

IT Naturally; Peterborough; Hybrid; GBP 40,000 - 50,000; Full time

Benefits offered by this job

Private healthcare from day one

Company bonus

Pension

Cycle to work

Wellbeing support

Life insurance

Private medical insurance

Job summary

IT Naturally in Peterborough is seeking a skilled Cyber Security Engineer to join our security operations team. The role focuses on security monitoring, incident investigation and vulnerability management across Microsoft 365, Azure and endpoints, with emphasis on Defender XDR and related controls.

You will administer endpoint protection, CSP frameworks (ISO 27001/CIS/NIST), and contribute to on-call rotations while communicating risk clearly to customers and colleagues.

Qualifications

• 3 years of experience as a Cyber Security Engineer.
• Hands-on experience with security monitoring, incident investigation and vulnerability management.
• Knowledge of Microsoft security technologies: Defender XDR, 365 security controls, Intune and Endpoint Security.
• Experience administering EDR platforms; CrowdStrike Falcon advantageous.
• Understanding of IAM, MFA, DLP, encryption and threat protection.
• Knowledge of Secure Email Gateways, DNS filtering, Secure Web Gateways, CASB and related controls.
• Awareness of secure design principles and ability to assess configurations and changes.
• Familiarity with ISO 27001, Cyber Essentials, CIS Controls and NIST CSF.
• Awareness of data protection, AI governance and emerging tech security risks.
• Ability to communicate risks clearly to stakeholders; strong written work for policies and reports.
• Collaborative, customer-focused, proactive, and able to learn and share knowledge.
• Fluent English; German desirable. Microsoft security certs or CySA+/ CISSP encouraged.

Responsibilities

• Investigate, contain and resolve cyber security events and incidents with RCA when needed.
• Design, implement and maintain security controls across Microsoft 365, Azure, endpoints, network and cloud.
• Assess risks from new services and changes; provide remediation advice through change processes.
• Manage vulnerability activities: assessment, prioritisation, reporting, remediation tracking and validation.
• Maintain security configurations and lifecycle management through patching and upgrades.
• Create and maintain security operating procedures, baselines, standards and governance docs.
• Support governance and compliance activities for ISO 27001 and Cyber Essentials.
• Monitor threats and emerging tech; coordinate actions accordingly.
• Provide trusted security consultancy, translating risks into business-focused recommendations.
• Produce security reports and metrics for stakeholders.
• Improve operations through automation and knowledge transfer to support teams.
• Contribute to 24x7 on-call rota and respond to priority incidents.

Skills

Security monitoring

Incident investigation

Vulnerability management

Identity & access management

MFA

Data loss prevention

Encryption

Threat protection

ISO 27001

Tools

CrowdStrike Falcon

Job description

Salary: £40,000 - 50,000 per year

Requirements

• We require 3 years of experience as a Cyber Security Engineer.
• We need hands-on experience with security monitoring, incident investigation and vulnerability management.
• We need practical knowledge of Microsoft security technologies, including Microsoft Defender XDR, Microsoft 365 security controls, Microsoft Intune and Endpoint Security.
• We need experience administering endpoint detection and response platforms; CrowdStrike Falcon experience is advantageous.
• We need a good understanding of identity and access management, MFA, data loss prevention, encryption and advanced threat protection.
• We need strong knowledge of cyber security principles and technologies, including Secure Email Gateways, DNS filtering, Secure Web Gateways, CASB, endpoint protection, anti-virus and related security controls.
• We need knowledge of secure design principles and the ability to assess technical solutions, configurations and changes.
• We need working knowledge of security frameworks and assurance activities, including ISO 27001, Cyber Essentials, CIS Controls and the NIST Cybersecurity Framework.
• We need awareness of data protection, AI governance and the security risks associated with emerging technologies.
• We need the ability to analyse complex security issues, evaluate urgency and business impact, and make clear, timely decisions.
• We need the ability to communicate technical risks and recommendations clearly to customers, colleagues and technical and non-technical stakeholders.
• We need strong written skills, with experience producing concise policies, standards, procedures, reports and governance documentation.
• We need a collaborative, customer-focused approach and the confidence to provide trusted security advice.
• We need a proactive, self-driven approach and the ability to respond dynamically and at pace to emerging threats, risks and priorities.
• We need a continuous improvement mindset, including the ability to identify opportunities to use automation to increase efficiency, consistency and service quality.
• We need a commitment to continual learning and knowledge sharing.
• We need excellent written and spoken English; German language capability is desirable.
• We need a relevant Microsoft security certification, such as Security Operations Analyst or Identity and Access Administrator, or an equivalent current certification.
• We need CompTIA CySA+, CISSP or another recognised cyber security qualification, or a demonstrable commitment to achieving one.
• We need capability aligned to SFIA responsibility level 4, working with autonomy, influence and appropriate complexity.
• We need United Kingdom work authorisation.

Responsibilities

• We investigate, contain and resolve cyber security events and incidents, escalating where appropriate and completing root cause analysis for significant or recurring issues.
• We design, implement and maintain proportionate security controls across Microsoft 365, Azure, endpoint, network and cloud environments.
• We assess security risks arising from new services, projects and changes, and provide clear remediation advice through change and CAB processes.
• We manage vulnerability activities, including assessment, prioritisation, reporting, remediation tracking and validation.
• We ensure the maintenance of security configurations, appliances and platforms through appropriate patching, upgrades and lifecycle management.
• We create and maintain cyber security-related operating procedures, security baselines, technical standards, architecture records and customer-facing documentation.
• We support security governance and compliance activities, including risk assessments, policy development, control implementation, evidence gathering and audits for frameworks such as ISO 27001 and Cyber Essentials.
• We monitor relevant threats and emerging technologies, assess their impact on our business and customers, and coordinate appropriate action.
• We provide trusted technical security consultancy to customers and internal teams, translating technical risks into clear, business-focused recommendations.
• We produce accurate security reports, service metrics and compliance information for internal and customer stakeholders.
• We improve repeatable security operations through automation, knowledge transfer and guidance for first- and second-line support teams.
• We contribute to the 24x7 on-call rota and respond to priority security incidents in line with agreed processes.

Technologies

• AI
• Azure
• Cloud
• Support
• Microsoft 365
• Microsoft Intune
• Network
• Security
• Web
• Office 365

More

We are IT Naturally, an award-winning, B Corp-certified MSP that puts people and the planet first. We support 250+ seat businesses with 24/7 IT services, helping keep them secure, efficient and cost-effective. We are proud to be named Employer of the Year two years running and offer an unlimited training budget, private healthcare from day one, a company performance-related bonus and a range of other benefits including pension, cycle to work, free parking, wellbeing support, life insurance and private medical insurance. We value diversity, equality and inclusion, and we encourage applicants from all backgrounds to apply. This is a hybrid role based in Peterborough.

last updated 36 week of 2026