DV Cleared Cyber Security Engineer

Lorien; Stevenage; On-site; GBP 105,000 - 149,000; Full time

Job summary

Lorien in Stevenage is seeking an experienced Cyber Security Engineer on a 2-year contract, onsite 5 days a week. You will maintain, evolve, and optimize a complex cyber security capability, ensuring availability, resilience, and continuous improvement of critical security technologies across enterprise environments.

This role requires DV clearance (live SC acceptable to start) and hands-on skills in SIEM, automation, scripting, and security tooling, with strong Windows/Linux and API experience,

Qualifications

• Live SC or DV Clearance required.
• Strong scripting and automation skills (PowerShell, Python, RegEx).
• Experience with SIEM and security monitoring platforms.
• Experience with APIs/HTTP/S and JSON data.
• Windows and Linux environments, AD/LDAP/IIS familiarity.

Responsibilities

• Lead maintenance and enhancement of SOC toolsets.
• Ensure health and resilience of security technologies across environments.
• Manage security platform integrations and data feeds.
• Tune alerts, model data, and manage logs for visibility.
• Implement SIEM, threat detection and monitoring tools.
• Develop and maintain automation scripts and playbooks.
• Perform patching, certificate updates, and lifecycle activities.
• Support investigations with advanced queries and scripting.
• Guide end-of-life and end-of-support roadmaps.
• Collaborate with teams to minimise disruption and improve performance.

Skills

PowerShell

Python

Regex

DV/SC Clearance

APIs/HTTP

SIEM

Automation scripts

Windows

Linux

AD/LDAP/IIS

VMware/Hyper-V

Playbooks

Threat detection

Security analytics

Job description

DV Cleared Cyber Security Engineer
Stevenage – Onsite 5 days a week
2 year contract
Inside of IR35
GBP92/11 per hour (8 hour day)
We are seeking an experienced Cyber Security Engineer to play a pivotal role in maintaining, enhancing, and evolving a complex cyber security capability. Working closely with the Cyber Security Capability Manager, you will be responsible for ensuring the availability, resilience, optimisation, and continuous improvement of critical security technologies across enterprise environments.

This role will require you to have DV Clearance however you can start on live SC!

Key Responsibilities

• Lead the maintenance, optimisation, and enhancement of Security Operations Centre (SOC) toolsets.
• Ensure the availability, health, and resilience of cyber security technologies across in–scope environments.
• Manage security platform integrations, connectivity, data feeds, and solution dependencies.
• Optimise security visibility through alert tuning, data modelling, and log management.
• Implement and maintain cyber security capabilities, including SIEM, threat detection technologies, and network monitoring tools.
• Develop, test, and maintain automation scripts and security playbooks.
• Carry out Back End refresh activities, including patching, certificate updates, software upgrades, and life cycle management.
• Support cyber security investigations through custom searches, advanced queries, Scripting, and root cause analysis.
• Track product life cycles and provide guidance on end–of–life and end–of–support roadmaps.
• Collaborate with technical teams to minimise service disruption and improve operational performance.
• Provide technical expertise for change management activities, CAB reviews, incidents, and problem investigations.
• Act as the Subject Matter Expert for SOC connectivity, integrations, and visibility across enterprise networks.

Essential Skills & Experience

We're looking for candidates who can demonstrate:

• Strong Scripting and automation experience using PowerShell, Python, and Regex.
• Live SC or DV Clearance
• Experience working with APIs, including HTTP/S communications, JSON objects, headers, and responses.
• Strong understanding of SIEM technologies and security monitoring platforms.
• Experience implementing, configuring, and maintaining cyber security tooling.
• Knowledge of Windows and Linux–based environments, including SMB and NFS storage technologies.
• Experience with Active Directory, LDAP authentication, and IIS configuration.
• Hands–on experience managing certificates, software upgrades, patching, and technology refresh programmes.
• Experience working with VMware, Hyper–V, virtual machines, and virtual networking.
• Strong troubleshooting and fault–finding skills across cyber security platforms and integrations.
• The ability to translate operational requirements into effective technical solutions.
• Experience developing and maintaining AI or machine learning solutions to improve security workflows and automation.
• Knowledge of threat detection technologies and security analytics platforms.