Cyber Security Operations Engineer - Incident Response

RSM UK; Crawley; Hybrid; GBP 45,000 - 65,000; Full time

Benefits offered by this job

Hybrid work

26 days holiday

Wellbeing benefits

Courses on demand

Job summary

RSM UK is seeking a Cyber Security Operations Engineer to monitor, detect and respond to security incidents in collaboration with our MSSP. You will define configurations across Microsoft tools and third‑party platforms, oversee MSSP performance, and continuously improve SecOps capabilities.

The role requires hands-on security operations experience, configuring detection rules, incident response, and strong collaboration across departments to protect our digital infrastructure.

Qualifications

• Strong understanding of networking and security fundamentals.
• Proven experience in security operations and incident response.
• Hands-on expertise with security tools such as SIEM, firewalls, IDS/IPS, malware protection, and vulnerability scanning.
• Experience with Microsoft security stack and threat protection capabilities.

Responsibilities

• Define and govern security configurations across Microsoft security tools and key third‑party platforms.
• Oversee MSSP performance, ensuring monitoring, detection, and incident response.
• Prioritise and manage security use cases, rules and alerts for MSSP implementation.
• Develop and maintain SecOps continuous improvement and automation.
• Define, document and maintain incident response processes and run-books.

Skills

Networking fundamentals

Security operations

SIEM

Firewalls

IDS/IPS

Malware protection

Vulnerability scanning

Microsoft security stack

Analytical thinking

Communication

Tools

Microsoft security stack

Job description

RSM UK is seeking a Cyber Security Operations Engineer to monitor, detect and respond to security incidents in collaboration with our MSSP. You will define configurations across Microsoft tools and third‑party platforms, oversee MSSP performance, and continuously improve SecOps capabilities.

The role requires hands-on security operations experience, configuring detection rules, incident response, and strong collaboration across departments to protect our digital infrastructure.