Cyber Security Engineer - AVP

Gravitas Group; Greater London; Hybrid; GBP 90,000 - 120,000; Full time

Benefits offered by this job

Hybrid work model

Job summary

Gravitas Group in the United Kingdom seeks a Cyber Security Engineer to join our Proactive Security team, focusing on building security tech stacks to mitigate threats with offensive and preventive measures. You will develop threat models, manage SIEM systems, and implement detection use cases while collaborating with incident response to protect information assets in a hybrid UK workplace.

The role demands strong scripting (PowerShell, Python), cloud security knowledge across Azure/AWS/GCP, and

Qualifications

• Right to work in the UK.
• Proven experience with SIEM implementation, configuration, and custom rule creation.
• Minimum of 5+ years in Security Engineering or similar roles.
• Extensive hands-on experience with EDR and SIEM technology stacks.
• In-depth knowledge of Active Directory security principles, Windows event collection, and network security.
• Proficiency in scripting (PowerShell, Python).
• Familiarity with cloud security principles in Azure, GCP, and AWS.
• Knowledge of operating systems including Windows Server and UNIX variants.
• Industry certifications such as AZ-500, SC-200, SC-900, or similar.
• On-site based in the UK, working in a hybrid environment.

Responsibilities

• Develop and maintain threat models for information assets and services.
• Build and optimise security tools for detection, remediation, and orchestration.
• Design, implement, and maintain SIEM workspaces and develop custom queries for threat hunting and incident investigation.
• Develop, test, and deploy advanced threat detection use cases based on vulnerability insights.
• Analyse security controls and collaborate with the SOC team to enhance detection logic.
• Provide security guidance on application and infrastructure protection.
• Automate security tasks using scripting languages such as PowerShell and Python.
• Manage security infrastructure related to privileged access, session management, and cloud security principles.

Skills

Threat modeling

Security tooling

SIEM tuning

Threat detection

SOC collaboration

App/infra security

Scripting

Privilege access

Cloud security

Operating systems

Tools

EDR

SIEM

Active Directory

PowerShell

Python

Azure

AWS

GCP

Windows Server

UNIX

Job description

Cyber Security Engineer

The Cyber Security Engineer joins our client's Proactive Security team, focusing on developing security technology stacks to ensure threat mitigation through offensive and preventive measures. The role offers the opportunity to work within a high-calibre security environment dedicated to safeguarding information assets.

Our client is a leading financial institution committed to protecting its infrastructure and client data through innovative security solutions. The organisation values proactive risk management and employs advanced security technologies to stay ahead of emerging threats.

Role Overview

The Cyber Security Engineer will develop and maintain threat models, assess security controls, and build tools for proactive detection, configuration drift monitoring, and automated remediation. You will be responsible for managing SIEM systems, developing use cases, and refining security monitoring practices. Ensuring the integrity and performance of security infrastructure and collaborating closely with incident response teams to detect and respond to threats are key components of the role. Success hinges on delivering robust security solutions and continuously improving detection capabilities and operational procedures.

Key Skills & Experience

• Develop and maintain threat models for information assets and services.
• Build and optimise security tools for detection, remediation, and orchestration.
• Design, implement, and maintain SIEM workspaces and develop custom queries for threat hunting and incident investigation.
• Develop, test, and deploy advanced threat detection use cases based on vulnerability insights.
• Analyse security controls and collaborate with the SOC team to enhance detection logic.
• Provide security guidance on application and infrastructure protection.
• Automate security tasks using scripting languages such as PowerShell and Python.
• Manage security infrastructure related to privileged access, session management, and cloud security principles.

Requirements

• Right to work in the UK.
• Proven experience with SIEM (implementation, configuration, custom rule creation).
• Minimum of 5+ years in Security Engineering, Security Automation, or similar roles.
• Extensive hands-on experience with EDR and SIEM technology stacks.
• In-depth knowledge of Active Directory security principles, Windows event collection, and network security.
• Proficiency in scripting (PowerShell, Python).
• Familiarity with cloud security principles in Azure, GCP, and AWS.
• Knowledge of operating systems including Windows Server and UNIX variants.
• Industry certifications such as AZ-500, SC-200, SC-900, or similar.
• On-site based in the UK, working in a hybrid environment.