Cyber Security Operations Engineer - Hybrid with MSSP/MDR

RSM UK Group LLP; City Of London; Hybrid; GBP 60,000 - 80,000; Full time

Benefits offered by this job

Hybrid & Flexible working

26 days holiday

Wellbeing benefits and financial tools

Learning & development: 300+ courses

Job summary

RSM UK Group LLP is seeking a Security Operations professional to govern configurations, monitor MSSP performance and respond to incidents. The role emphasizes hardening Microsoft security tools, risk assessment and cross‑team collaboration.

You will work in a hybrid environment with access to advanced security platforms, training and a broad benefits package. We value continuous improvement and proactive security leadership.

Qualifications

• Experience delivering security operations in a professional setting.
• Hands-on with core security tools (SIEM, firewalls, IDS/IPS, vulnerability scanners).
• Experience with Microsoft security stack and threat protection capabilities.
• Strong analytical, problem‑solving and communication skills.

Responsibilities

• Define and govern security configurations for MS security tools and third‑party platforms.
• Oversee MSSP performance, monitoring, detection and incident response.
• Prioritise security use cases and alerts to improve detection coverage.
• Develop SecOps processes, automation and MDR/XDR alerts runbooks.
• Document and maintain operational knowledge and incident response runbooks.

Skills

Security operations

MSSP

Networking fundamentals

Analytical thinking

Communication

Tools

SIEM

Firewalls

IDS/IPS

Vulnerability scanning

Mimecast

Palo Alto

Cortex

Job description

RSM UK Group LLP is seeking a Security Operations professional to govern configurations, monitor MSSP performance and respond to incidents. The role emphasizes hardening Microsoft security tools, risk assessment and cross‑team collaboration.

You will work in a hybrid environment with access to advanced security platforms, training and a broad benefits package. We value continuous improvement and proactive security leadership.