Cyber Security Engineer

Laing O'Rourke; Worcester Park Estate; On-site; GBP 60,000 - 90,000; Full time

Job summary

Laing O’Rourke is seeking a Cyber Security Engineer to translate security roadmap into practical, well-engineered solutions. This hands-on role helps protect critical information and drive a modern, resilient technology environment in a global team.

You will design, implement and continually improve security controls across IT and projects, collaborating with security architecture, operations and risk specialists to meet business and compliance needs.

Qualifications

• Experience with enterprise infrastructure including Windows and Azure.
• Hands-on with Microsoft E5 security toolset.
• Experience implementing and supporting SIEM, EDR, firewalls, vulnerability management, IAM, encryption.
• Knowledge of security frameworks such as NIST, ISO 27001 or Cyber Essentials.
• Ability to translate business needs into proportionate security controls.
• Clear communication of security risks to technical and non-technical audiences.
• Structured approach to solving complex problems, including during security incidents.

Responsibilities

• Design, implement and maintain cyber security controls to reduce risk.
• Identify security requirements through risk and business impact assessments.
• Shape and deliver the cyber security roadmap with relevant frameworks.
• Embed secure-by-design principles across IT and business projects.
• Provide practical guidance, standards, templates and baselines.
• Assess emerging threats and recommend remedial actions.
• Support response to critical cyber security incidents with Cyber Operations.
• Maintain and improve cyber security policies and processes.
• Evaluate technologies and vendors and provide recommendations to leadership.

Skills

Security engineering

Azure cloud

E5 security tools

SIEM

EDR

Firewall technologies

Vulnerability management

IAM

Encryption

Risk communication

Secure-by-design

Tools

Azure

SIEM tools

EDR platforms

Vulnerability scanners

Encryption tech

IAM tooling

Job description

Cyber Security Engineer - Job Grade 5

Help protect the people, projects and information behind some of the world's most complex engineering and construction programmes.

We're looking for a Cyber Security Engineer to help translate our security roadmap into practical, well-engineered solutions. This is a hands‑on opportunity to apply your technical expertise, influence security by design and strengthen a modern, resilient technology environment.

Laing O'Rourke's IT function has renewed its strategy to support the company's ambition to transform the construction industry, making it more sustainable, more productive, and fit for the future.

Technology has a critical role to play in achieving this ambition. Our focus is on applying digital capability in ways that genuinely matter, shaping how complex projects are delivered, how decisions are made, and how innovation improves outcomes for people, communities, and the environment.

Our mission is clear: to create a modern and resilient technology environment where trusted data informs every decision, AI enhances every process, and digital capability enables the organisation to operate with greater scale and productivity.

To deliver this, we are building a different kind of IT function, one that is trusted by the business, forward looking in its thinking, and deeply connected to operational outcomes. We are looking for individuals who are curious, thoughtful, and motivated by contributing to work that has real industry impact.

The Role

Based in Dartford and working as part of a global Cyber Security team, you will design, implement and continually improve the controls that protect our technology environment.

You will collaborate with colleagues across IT, projects and the wider business to understand their needs and introduce proportionate controls that meet business, compliance and security requirements. Working closely with cyber security architecture and operations specialists, you will help ensure security is considered from the outset of projects rather than added later.

Key Responsibilities

• Design, implement and maintain cyber security solutions that reduce business risk and support compliance with security policies and standards.
• Work with business units, project teams and risk specialists to identify security requirements through risk and business impact assessments.
• Help shape and deliver the cyber security roadmap, including controls supporting relevant industry frameworks and certifications.
• Embed secure-by-design principles across IT and business projects, providing practical guidance, standards, templates and security baselines.
• Assess emerging threats, vulnerabilities and control techniques, recommending proportionate remedial action.
• Support the response to critical cyber security incidents in collaboration with Cyber Operations.
• Maintain and improve cyber security policies, standards and processes.
• Evaluate technologies, suppliers and security services, using your findings to provide clear recommendations to security leadership.

Essential Requirements

• Relevant cyber security engineering qualifications or equivalent practical experience.
• Experience of enterprise infrastructure, including Windows and Microsoft Azure cloud or hybrid environments.
• Hands-on experience with the Microsoft E5 security toolset.
• Experience implementing and supporting a range of security technologies, including SIEM, EDR, firewalls, vulnerability management, identity and access management, encryption and related security controls.
• Working knowledge of recognised security frameworks such as Essential Eight, NIST Cybersecurity Framework, ISO 27001 or Cyber Essentials.
• Understanding of information risk principles and the ability to translate business and project needs into proportionate security controls.
• Ability to communicate security and risk clearly to technical and non-technical audiences.
• A structured and considered approach to solving complex problems, including during security incidents.

Desirable Requirements

• Experience of security testing and vulnerability management, including penetration testing or code review.
• Experience developing or improving IT security policies, processes and standards.
• Audit, compliance or governance experience, including knowledge of regulations such as GDPR and DISP.
• An understanding of how security controls affect end users within a complex organisation.
• Relevant professional certifications such as CISSP, CISM, CISA or CRISC, or equivalent professional development and experience.

What Makes This Role Compelling

You will have the opportunity to work on meaningful security challenges across a complex international business. Your work will directly contribute to protecting critical information and projects, improving organisational resilience and embedding security into the way technology solutions are designed and delivered.

The role offers scope to apply and develop your technical expertise, contribute ideas and help shape the future of cyber security at Laing O'Rourke.

We recognise that no candidate will meet every requirement. If you're excited by this opportunity and believe you can contribute to the role, we'd encourage you to apply.

About Laing O'Rourke

Laing O'Rourke is an international engineering and construction business known for pushing boundaries in digital engineering, modern methods of construction and sustainable delivery. With more than 150 years of heritage, we are committed to creating environments in which diverse teams can excel and thrive.

Accessibility & Inclusion

We are proud to be part of the Disability Confident scheme. If you meet the essential criteria and would like to be considered through our Offer an Interview scheme, please let us know. We're also happy to provide reasonable adjustments throughout the recruitment process.

If you require an alternative format of this advert or need support during the application, please contact: [e-mail]