DV Cleared Cyber Security Engineer

Lorien; Aston; On-site; GBP 105,000 - 149,000; Full time

Job summary

Lorien is recruiting an experienced Cyber Security Engineer for a Stevenage-based, onsite role. The contract runs for 2 years and isInside IR35, with a hourly rate of £92 for an 8-hour day.

You will maintain and evolve a complex cyber security capability, leading SOC toolset activities and guiding security posture across enterprise environments.

Qualifications

• Proficiency in scripting and automation using PowerShell, Python and Regex.
• Live SC or DV Clearance required.
• Experience with APIs including HTTP/S, JSON headers and responses.
• Strong understanding of SIEM technologies and security monitoring platforms.
• Experience with cyber security tooling, Windows and Linux environments.
• Experience with AD/LDAP and IIS configuration.
• Experience with certificates, patches and life cycle management.
• Experience with VMware/Hyper-V and virtual networking.

Responsibilities

• Lead maintenance, optimisation and enhancement of SOC toolsets.
• Ensure availability, health and resilience of cyber security technologies across environments.
• Manage security platform integrations and data feeds.
• Tune alerts, model data and manage logs for better visibility.
• Implement and maintain SIEM, threat detection and monitoring tools.
• Develop and maintain automation scripts and security playbooks.
• Support investigations via advanced queries, scripting and root-cause analysis.
• Collaborate with teams to minimise disruption and improve performance.

Skills

PowerShell

Python

Regex

APIs

SIEM

Tools

SIEM tools

VMware

Hyper-V

Job description

DV Cleared Cyber Security Engineer
Stevenage - Onsite 5 days a week
2 year contract
Inside of IR35
£92/11 per hour (8 hour day)
We are seeking an experienced Cyber Security Engineer to play a pivotal role in maintaining, enhancing, and evolving a complex cyber security capability. Working closely with the Cyber Security Capability Manager, you will be responsible for ensuring the availability, resilience, optimisation, and continuous improvement of critical security technologies across enterprise environments.

This role will require you to have DV Clearance however you can start on live SC!

Key Responsibilities

• Lead the maintenance, optimisation, and enhancement of Security Operations Centre (SOC) toolsets.
• Ensure the availability, health, and resilience of cyber security technologies across in-scope environments.
• Manage security platform integrations, connectivity, data feeds, and solution dependencies.
• Optimise security visibility through alert tuning, data modelling, and log management.
• Implement and maintain cyber security capabilities, including SIEM, threat detection technologies, and network monitoring tools.
• Develop, test, and maintain automation scripts and security playbooks.
• Carry out Back End refresh activities, including patching, certificate updates, software upgrades, and life cycle management.
• Support cyber security investigations through custom searches, advanced queries, Scripting, and root cause analysis.
• Track product life cycles and provide guidance on end-of-life and end-of-support roadmaps.
• Collaborate with technical teams to minimise service disruption and improve operational performance.
• Provide technical expertise for change management activities, CAB reviews, incidents, and problem investigations.
• Act as the Subject Matter Expert for SOC connectivity, integrations, and visibility across enterprise networks.

Essential Skills & Experience

We're looking for candidates who can demonstrate:

• Strong Scripting and automation experience using PowerShell, Python, and Regex.
• Live SC or DV Clearance
• Experience working with APIs, including HTTP/S communications, JSON objects, headers, and responses.
• Strong understanding of SIEM technologies and security monitoring platforms.
• Experience implementing, configuring, and maintaining cyber security tooling.
• Knowledge of Windows and Linux-based environments, including SMB and NFS storage technologies.
• Experience with Active Directory, LDAP authentication, and IIS configuration.
• Hands-on experience managing certificates, software upgrades, patching, and technology refresh programmes.
• Experience working with VMware, Hyper-V, virtual machines, and virtual networking.
• Strong troubleshooting and fault-finding skills across cyber security platforms and integrations.
• The ability to translate operational requirements into effective technical solutions.
• Experience developing and maintaining AI or machine learning solutions to improve security workflows and automation.
• Knowledge of threat detection technologies and security analytics platforms.

Guidant, Carbon60, Lorien & SRG - The Vertage Group Portfolio are acting as an Employment Business in relation to this vacancy.