Cyber Security Engineer (REF 197774)

Forsyth Barnes; Manchester; Hybrid; GBP 50,000 - 70,000; Full time

Job summary

Forsyth Barnes is seeking a Cyber Security Engineer in Manchester to join a high-performing security function protecting a critical national infrastructure environment. This role is hands-on, focusing on security monitoring, tooling, threat detection and collaborating with technology, security and operations teams.

You will maintain and enhance our Elastic SIEM and security controls across AWS and Azure, support SOC/NOC activities, and help improve detections and incident response in an evolving

Qualifications

• Hands-on cyber security engineering and operations experience.
• Experience with security monitoring, detection and incident investigation.
• Familiarity with log management and telemetry pipelines.

Responsibilities

• Manage, maintain and develop the Elastic SIEM platform.
• Improve security monitoring, detection and response capabilities.
• Support SOC and NOC activities.
• Design and enhance security controls across AWS and Azure.
• Support DLP initiatives and associated controls.
• Deliver log ingestion, transformation and integration.
• Collaborate with Security Operations, Cloud, Security Architecture and Governance teams.
• Investigate security events and improve threat detection.

Skills

Cyber security engineering

Security operations

SIEM

Cloud security (AWS/Azure)

Incident investigation

Analytical troubleshooting

Stakeholder management

Tools

Elastic SIEM

AWS

Azure

Job description

Job Title - Cyber Security Engineer (REF 197774)

Location - Manchester

Working pattern - Hybrid

Permanent role

Role Profile

We're looking for a Cyber Security Engineer to join a high-performing security function responsible for protecting a critical national infrastructure environment.

This is an excellent opportunity for a hands-on cyber security professional who enjoys building and improving security monitoring capabilities, enhancing security controls, and working collaboratively across technology, security and operational teams.

You'll play a key role in maintaining and developing our security tooling, improving threat detection capabilities, and ensuring our security operations remain effective in an evolving threat

landscape.

Key Responsibilities

• Manage, maintain and develop the Elastic SIEM platform.
• Improve security monitoring, detection and response capabilities.
• Support Security Operations Centre (SOC) and Network Operations Centre (NOC) activities.
• Design and enhance security controls across AWS and Azure environments.
• Support Data Loss Prevention (DLP) initiatives and associated controls.
• Deliver log ingestion, transformation, normalisation and integration activities.
• Work closely with Security Operations, Cloud, Security Architecture, Governance and wider technology teams.
• Investigate security events and contribute to threat detection improvements.
• Ensure security tooling effectively supports operational and business requirements.

What We're Looking For

• Strong foundation in cyber security engineering and security operations.
• Experience working with SIEM technologies (Elastic experience advantageous but not essential).
• Understanding of log management, telemetry pipelines and data integration.
• Knowledge of cloud security principles across AWS and Azure.
• Experience with security monitoring, detection and incident investigation.
• Strong troubleshooting and analytical skills.
• Ability to operate within complex, regulated environments.

Personal Qualities

• Excellent communication and stakeholder management skills.
• Able to work effectively across technical and business teams.
• Comfortable influencing stakeholders at different levels.
• Self-motivated with a strong sense of ownership.
• Collaborative approach with a focus on delivering positive security outcomes.
• Curious, adaptable and committed to continuous learning.

Suitable Backgrounds

We welcome applications from professionals with experience in:

• Cyber Security Engineering
• Security Operations (SOC)
• Infrastructure Security
• IT Operations
• Security Monitoring & Detection Engineering
• Managed Security Service Providers (MSSPs)