Cyber Security Engineer

Portare Solutions Limited; United Kingdom; Remote; GBP 50,000 - 60,000; Full time

Job summary

Portare Solutions Limited is seeking a Cyber Security Engineer to enhance security practices within a growing organization. The role involves managing security infrastructure, responding to threats, and ensuring compliance with security standards. Ideal candidates will have significant experience in IT security, particularly with M365, and possess relevant certifications.

Qualifications

• Experience in a similar technical IT Security role within a medium to large enterprise.
• Specific M365 experience is essential.
• Knowledge of security principles across various technologies.

Responsibilities

• Building and maturing Microsoft Security practices using Azure M365.
• Identifying, mitigating, and managing security threats.
• Conducting internal audits of security controls.

Skills

IT Security

M365

Security Risk Management

Threat Intelligence

Incident Management

Communication

Education

Cisco certification

SANS certification

ISO27001 certification

CCSP certification

CISA certification

SSCP certification

Job description

Cyber Security Engineer

Salary: GBP50,000 – GBP60,000
Location: Home based with some travel

Build & Mature Security Practices

Portare Solutions is partnering with a key client, an organization in a significant growth phase, to find a Cyber Security Engineer. This is a great opportunity to join a growing team and contribute to enhancing their security infrastructure and practices.

About The Opportunity

You will be part of a dynamic team responsible for the daily operation of the security infrastructure, monitoring security events, and responding effectively. Your role will involve designing, implementing, monitoring, and supporting IT security tools, addressing complex issues in a large enterprise hybrid environment. The position includes both BAU and project work, such as Azure security projects (with a focus on M365), automation, and secure deployment of new applications. It is an exciting time to join as the organization undergoes large-scale transformation and IT maturity improvements.

Your Key Responsibilities Will Include:

• Building and maturing Microsoft Security practices using the Azure M365 stack and E5 capabilities.
• Evaluating the effectiveness of security products and tools to ensure continuous protection of assets.
• Identifying, mitigating, and managing security threats, vulnerabilities, and risks.
• Collaborating with the managed security operation center.
• Assessing and responding to external threat intelligence reports.
• Conducting internal audits of security controls.
• Supporting ISO27001, NIST, Cyber Essentials Plus, and other audit programs.
• Providing guidance within IT and the wider business to ensure policy compliance.
• Contributing to the continuous improvement of security policies, procedures, standards, and guidelines.
• Managing and investigating security events, including post-incident reviews.
• Researching security enhancements and making recommendations.
• Staying current on IT trends and security standards.

Who We're Looking For

We seek a candidate with solid technical IT Security experience.

Experience & Expertise:

• Experience in a similar technical IT Security role within a medium to large enterprise.
• Specific M365 experience is essential (SharePoint Online, Purview, Intune, Defender, Sentinel, Azure AD/Entra).
• Knowledge of security principles across SIEM, Antivirus, DLP, Firewalls, Open Source Filtering tools, Cloud security (Azure), EDR, vulnerability scanning, and IdAM (PAM).
• Experience working with a SOC is desirable.
• Knowledge of Windows and Linux servers.
• Familiarity with Endpoint and network security technologies.
• Understanding of IT Security and Governance best practices and standards (ISO27001, NIST, Cyber Essentials).
• Strong grasp of security risk, threat, and vulnerability management principles.
• Ability to manage workload proactively, identify risks, and work flexibly.

Qualifications:

• Recognized IT or Information Security qualifications (Cisco, SANS, ISO27001, CCSP, CISA, SSCP) are desirable.
• Certifications such as AZ500, SC200, SC900 are advantageous.
• CEH certification is desirable.

Skills & Behaviours:

• Self-motivated and intuitive.
• Excellent verbal and written communication skills.
• Strong interpersonal skills.
• Ability to work accurately and efficiently in a fast-changing environment.
• Quick response to risks and issues.
• Willingness to learn and undergo training.