Cybersecurity Engineer

Cambridge Consultants; Cambridge; Ibrido; GBP 60.000 - 80.000; Tempo pieno

Vantaggi offerti da questo lavoro

25 days annual leave plus bank

Profit share bonus

Hybrid working patterns

Medical insurance

Employee assistance program

Enhanced parental leave

Pension plan

Free meals in office

Onsite parking and close public links

Social events & rooftop bar

Descrizione del lavoro

Cambridge Consultants is seeking a hands-on Cybersecurity Engineer to operate and improve security controls across the estate. You’ll monitor security tooling, investigate alerts and coordinate remediation with a small team and cross-functional IT peers.

You’ll triage vulnerabilities, support email security, review software requests for risk, and help advance cloud security, IAM, monitoring and data protection initiatives. Strong communication and teamwork are essential.

Competenze

• Experience investigating and triaging alerts from AV/EDR tooling (e.g. Sophos, Defender) including Windows event logs, suspicious activity and email threats.
• Ability to assess security risk, including threats, vulnerabilities and risk, with knowledge of CVEs, CVSS and remediation prioritisation.
• Experience supporting security incidents and understanding the incident response lifecycle, evidence handling and reporting.
• Grounding in identity and access management (Active Directory, Entra ID, Conditional Access, SSO) and networking concepts.
• Team player with breadth across many areas rather than deep single-technology focus, and strong written/verbal communication.
• Excellent communication skills at both technical and non-technical levels, with attention to detail and problem-solving.

Mansioni

• Monitor and operate the team's core security tooling, investigating alerts and coordinating remediation activities.
• Manage vulnerability assessment activities, including vulnerability scanning, remediation tracking and risk register maintenance.
• Support operation of email security controls, including investigation and triage of suspicious email activity.
• Review software requests, approving low-risk solutions and conducting security assessments with stakeholders.
• Contribute to continuous improvement of security monitoring, processes and operational practices.
• Assist with administration and improvement of identity, access management and endpoint security controls (Active Directory, Entra ID, Conditional Access, endpoint management).
• Help deliver cybersecurity awareness activities and provide practical security guidance across IT and business units.
• Contribute to security improvement initiatives across cloud security, identity, monitoring and data protection technologies.

Conoscenze

AV/EDR tooling

Windows event logs

Threat detection

Security risk assessment

Incident response

Identity & Access Management

Active Directory

Entra ID

Conditional Access

Networking basics

Communication skills

Strumenti

Microsoft 365 Security

Descrizione del lavoro

Overview

The Cybersecurity Engineer is a hands-on technical role within the Cybersecurity team, responsible for the day-to-day operation, monitoring and continuous improvement of the security controls that protect Cambridge Consultants' systems, data and client work. As a small team, everyone contributes across the full breadth of the estate rather than owning a single system in isolation.

Overview

The Cybersecurity Engineer is a hands-on technical role within the Cybersecurity team, responsible for the day-to-day operation, monitoring and continuous improvement of the security controls that protect Cambridge Consultants' systems, data and client work. As a small team, everyone contributes across the full breadth of the estate rather than owning a single system in isolation.

Reporting to the Head of Cybersecurity, you'll work across a wide range of security systems and tooling alongside the rest of the Cybersecurity team, while collaborating with colleagues across IT Services and other business stakeholders to keep the organisation secure. Strong teamwork and a willingness to build knowledge beyond your immediate specialism are essential, given the breadth of technologies and responsibilities covered by the team.

What you'll be doing:

• Monitor and operate the team's core security tooling, investigating alerts and coordinating remediation activities.
• Manage vulnerability assessment activities, including vulnerability scanning, remediation tracking and maintenance of the risk register.
• Support the operation of email security controls, including investigation and triage of suspicious email activity.
• Review software requests, approving low-risk solutions and conducting more detailed security assessments where required, working with stakeholders across the business to understand requirements and risks.
• Contribute to the continuous improvement of security monitoring, processes and operational practices.
• Support the administration and improvement of identity, access management and endpoint security controls, including Active Directory, Entra ID, Conditional Access and endpoint management technologies.
• Help deliver cybersecurity awareness activities, provide practical security guidance, and work with colleagues across IT and the business to support secure ways of working.
• Contribute to security improvement initiatives and projects across cloud security, identity, monitoring and data protection technologies, informed by emerging threats and technology risks

What you need to succeed:

• Experience investigating and triaging alerts from AV/EDR tooling (e.g. Sophos, Defender), including analysing Windows event logs, suspicious activity, email-related threats and Microsoft 365 security alerts.
• Ability to assess and articulate security risk, including the relationship between threats, vulnerabilities and risk, with working knowledge of vulnerability management concepts such as CVEs, CVSS scoring and remediation prioritisation.
• Experience supporting security incidents, with an understanding of the incident response lifecycle, evidence handling and reporting requirements.
• Basic grounding in identity and access management (Active Directory, Entra ID, Conditional Access, SSO), Microsoft 365 security capabilities, and core networking concepts (protocols, ports, DNS, firewalls/VPN).
• A team player with a strong willingness to learn, share knowledge and support colleagues across a small team covering a broad range of systems. This role requires breadth across many areas rather than deep specialism in a single technology.
• Excellent communication skills at both technical and non-technical levels, with strong attention to detail, critical thinking and problem-solving.

What we offer:

• 25 days annual leave plus bank holidays (with the option to buy 10 more a year)
• Company bonus (profit share)
• Flexible working patterns and hybrid working
• Medical insurance and group income protection
• Employee assistance programme and mental health support group
• Enhanced maternity/paternity leave
• Sabbatical leave
• Travel insurance (business and leisure)
• Generous company pension plan
• Personalised career development and training plans
• Free breakfast and two-course lunch in the office every day
• Free onsite parking and we are close to public transport links
• A variety of events organised by our social committee, ranging from summer and Christmas parties to board game nights and socials at our own rooftop bar!

Why Cambridge Consultants?

At Cambridge Consultants, you'll contribute to radical, new-to-the-world innovation that transforms business, society and the planet. Joining our multidisciplinary teams means helping to turn bold ideas into reality, harnessing the power of deep tech to create products, services and experiences that have never existed before. Whether you're advancing technologies, shaping strategy, supporting operations or driving commercial growth, it's an opportunity to make a real impact and help create the future.