Cyber Security Engineer, M365 Security, ISO27001, COR7671

Corriculo Ltd; Basingstoke; Hybrid; GBP 65,000 - 90,000; Full time

Benefits offered by this job

25 days holiday

Pension

Flexible working/working from home

Job summary

Corriculo Ltd is seeking a Cyber Security Engineer to manage day-to-day security operations, incident response, and vulnerability management within a UK-based organisation. You will advise on security for changes, deployments, and project designs while maintaining ISO27001, CyberEssentials, and related controls.

The role emphasizes hands-on security across M365 tooling, endpoint protection, IAM, and security governance, with flexible working options and opportunities for progression.

Qualifications

• Commercial cyber security experience, preferably in SME environments.
• Hands-on with penetration testing and vulnerability scanning tools.
• Solid experience with M365 security tooling (Intune, Defender, Entra, Purview, Copilot).
• Familiar with ISO27001, CyberEssentials, CyberEssentials+ and ITIL processes.

Responsibilities

• Monitor and respond to security alerts and incidents; manage ticket queue.
• Perform vulnerability remediation across infrastructure and endpoints.
• Conduct penetration testing and drive remediation efforts.
• Advise on security in project designs and change requests; support ISO27001 compliance.

Skills

M365 security

Penetration testing

Vulnerability assessment

IAM / CA policies

Endpoint protection

ISO27001 compliance

ITIL incident/change mgmt

Tools

Tenable Nessus

Kali Linux

Intune

Defender

Entra

Purview

Copilot for Security

Job description

Cyber Security Engineer, M365 Security, ISO27001

A Cyber Security Engineer opportunity for someone with solid experience across the Microsoft 365 security stack (Intune, Defender, Entra, Purview, Copilot) has opened up with an established UK-based organisation looking to strengthen its technical security function. Could this be the role where you put your hands-on security expertise to work across a broad and varied remit, with genuine scope to make an impact?

The Role

The Cyber Security Engineer will sit at the heart of the Group IT Services function, taking ownership of day-to-day security operations alongside longer-term compliance and vulnerability management activity. You will monitor and respond to alerts and incidents, gather and act on threat intelligence, and manage the security ticket queue to ensure timely resolution. Beyond reactive work, you will conduct penetration testing, drive vulnerability remediation across the infrastructure and end-user estate, and maintain endpoint protection and identity and access management configurations. The Cyber Security Engineer will also play a key advisory role, contributing to change request approvals, project designs, and software deployment decisions from a security perspective, as well as maintaining compliance with ISO27001, CyberEssentials, and CyberEssentials+.

The Company

This is a well-established, mid-sized business operating across multiple entities in the UK. The organisation holds a range of recognised quality and security accreditations and has a mature approach to IT governance. The IT function is collaborative and commercially aware, and the Cyber Security Engineer will be working closely with a Chief Information Security Officer who takes a hands-on interest in the team.

What experience does the Cyber Security Engineer need?

• Commercial experience in a cyber security or security analyst role, ideally within an SME environment, with a solid grounding in basic infrastructure or system administration
• Hands-on knowledge of penetration testing and vulnerability scanning tools such as Tenable Nessus or Kali Linux, alongside experience of endpoint protection, identity and access management, and conditional access or mobile application management policies
• Practical experience with M365 security tooling including Intune, Defender, Entra, Purview, and Copilot for Security
• Familiarity with ISO27001, CyberEssentials, and CyberEssentials+, combined with an understanding of ITIL disciplines such as incident, problem, and change management

Benefits

• 25 days holiday
• Pension
• Flexible working/working from home
• Amazing opportunities for training and progression

Cyber Security Engineer

#CL #indhigh