Cyber Security Engineer

Meritus; Stevenage; On-site; GBP 7,577,000 - 12,690,000; Full time

Job summary

Meritus is seeking a Cyber Security Engineer to join our client in Stevenage on a 24‑month, onsite contract. The role focuses on maintaining and enhancing cyber security tooling, with emphasis on SIEM, network visibility, log ingestion and alert tuning.

You’ll guide tool integrations and improve efficiency across SOC platforms. The ideal candidate demonstrates strong coding in PowerShell and Python, plus experience with Windows and Linux environments, virtualization, and security tooling.

Qualifications

• Experience across cyber security engineering and infrastructure technologies.
• Strong coding and scripting skills, particularly PowerShell and Python.
• Experience with APIs, including HTTP/S headers and responses and JSON objects.
• Knowledge of Windows (IIS) and Unix/Linux ({*Nix) remote storage, including NFS.
• Experience configuring IIS (Windows Web Server).
• Knowledge of Active Directory and LDAP authentication.
• Experience applying certificates, software updates and patches, including activities associated with technology refresh and end-of-life replacement.
• Experience with VMware and/or Hyper-V virtual machines and virtual switches.
• Experience implementing, configuring and maintaining cyber security tooling.
• Experience creating, testing and maintaining AI or machine-learning technologies to optimise workflows or security playbooks.
• Experience with SIEM technologies and security monitoring platforms

Responsibilities

• Maintain SOC toolset mappings, integrations, data feeds and topology.
• Improve visibility and optimization of SOC tools through data modelling and tuning.
• Maintain core SOC toolsets, availability and functionality.
• Monitor security tech readiness across in-scope environments.
• Advise on End-of-Life and End-of-Support roadmaps.
• Plan and coordinate SOC appliance upgrades.
• Implement new cyber security capabilities and integrate with existing tools.
• Configure security tools and report through CABs and control boards.
• Lead scripting activities and ensure proper documentation and testing.
• Investigate false positives and other security detection issues.
• Act as SME for SOC connectivity and network visibility.

Skills

PowerShell

Python

Regex

APIs

JSON

HTTP/S

Proxy config

Windows server

Linux

Active Directory

LDAP

SIEM

Virtualization

Tools

VMware/Hyper-V

IIS

NFS

CABs

Job description

MERITUS are recruiting for a Cyber Security Engineer to join our client on an initial 24 month contract to support defence programmes as they hit their critical stages.

CYBER SECURITY ENGINEER - INSIDE IR35 - Up to £92.11 per hour - STEVENAGE (FULL TIME ONSITE) - 24 MONTHS - UNDERGO DV / MUST HAVE ACTIVE SC - STRONG CODING/SCRIPTING BACKGROUND NEEDED - SINGLE STAGE INTERVIEW PROCESS - SECTOR: Defence

The successful candidate will lead on the technical aspects of maintaining and improving cyber security appliance efficiency, supporting activities such as alert tuning, network visibility and log ingestion into relevant security toolsets. They will provide technical advice on the implementation of new tools and lead the enhancement and expansion of existing capabilities.

Key Responsibilities

• SIEM (Security Information and Event Management)
• Network Packet Capture platforms
• Anti-malware and malicious-code protection
• Threat detection technologies
• Security monitoring and analysis platforms

Core responsibilities include:

• Maintain accurate mapping and topology of SOC toolsets, including integrations, connections and data feeds between solutions.
• Improve the visibility and optimisation of SOC tools through data modelling, configuration and tuning.
• Maintain core SOC toolsets, ensuring their availability, functionality and optimisation.
• Monitor the availability and operational readiness of cyber security technologies across in-scope environments.
• Track product lifecycles and advise management on End-of-Life (EOL) and End-of-Support (EOS) roadmaps.
• Support the planning, coordination and execution of SOC appliance upgrades.
• Support the implementation of new cyber security capabilities and their integration with existing solutions.
• Implement security-tool configuration changes and ensure appropriate reporting through Change Advisory Boards (CABs) and control boards.
• Lead playbook scripting activities, ensuring scripts are appropriately documented and tested.
• Investigate and troubleshoot false positives and other technical issues affecting security detection.
• Act as a technical subject matter expert for SOC connectivity and network visibility, ensuring integrations and connections are understood and documented.

Required Skills & Experience

The successful candidate should have experience across a broad range of cyber security engineering and infrastructure technologies, including:

• Strong coding and scripting skills, particularly PowerShell, Python and Regex.
• Experience working with APIs, including HTTP/S headers and responses and JSON objects.
• Experience with proxy administration and configuration changes.
• Knowledge of Windows (SMB) and Unix/Linux (*Nix) remote storage, including NFS.
• Experience configuring IIS (Windows Web Server).
• Knowledge of Active Directory and LDAP authentication.
• Experience applying certificates, software updates and patches, including activities associated with technology refresh and end-of-life replacement.
• Experience with VMware and/or Hyper-V virtual machines and virtual switches.
• Experience implementing, configuring and maintaining cyber security tooling.
• Experience creating, testing and maintaining AI or machine-learning technologies to optimise workflows or security playbooks.
• Experience with SIEM technologies and security monitoring platforms