Hybrid Cyber Security Engineer: Identity & Cloud Security

Proactive.IT Appointments Ltd.; Northampton; Hybrid; GBP 70,000 - 95,000; Full time

Benefits offered by this job

Excellent Benefits Package

Job summary

Proactive.IT Appointments Ltd. seeks an experienced Cyber Security Engineer in Northampton for a hybrid role combining on-site and remote work. You will reinforce security across identity, endpoints, clouds and business apps, aligning with least-privilege and zero-trust principles.

You will collaborate with IT operations, development and platform teams, handling incident response, vulnerability remediation and security design improvements while contributing to audits and compliance initiatives.

Qualifications

• 5 years of relevant experience in cybersecurity, infrastructure security, cloud security or a closely related technical role.
• Practical experience securing enterprise identity, productivity and collaboration services.
• A good understanding of identity and access management, multifactor authentication, conditional access and privileged access.
• Experience securing and managing Windows endpoints through a modern device-management platform.
• Experience using endpoint detection and response, extended detection and response, or comparable security technologies.
• Practical experience assessing, prioritising and coordinating the remediation of vulnerabilities.
• Working knowledge of public-cloud security concepts, including identity, networking, logging, data protection and secure configuration.
• An understanding of common attack techniques and appropriate preventative and detective controls.
• Experience investigating security events or supporting incident response.
• The ability to evaluate technical findings and recommend proportionate, achievable improvements.
• The ability to write clear technical documentation, incident records and risk summaries.
• Strong communication skills and the ability to work effectively with technical and non-technical colleagues.

Responsibilities

• Maintain and improve security controls across identity, endpoint, cloud and business application environments.
• Review authentication, access and administrative privileges, promoting least-privilege and zero-trust principles.
• Improve endpoint security, device compliance, secure configuration and protection against malicious activity.
• Work with IT operations to address security weaknesses in workplace technology and supporting infrastructure.
• Review cloud services and hosted workloads for security risks, configuration weaknesses and excessive access.
• Support development and platform teams in incorporating security into technical designs and delivery processes.
• Operate and improve the organisation’s vulnerability and exposure-management processes.
• Coordinate remediation activity with internal system owners and confirm that corrective actions are effective.
• Investigate security alerts and incidents, coordinating with internal teams and external security specialists.
• Maintain practical incident-response procedures, escalation routes and supporting documentation.
• Participate in incident exercises and post-incident reviews, ensuring that lessons result in measurable improvements.
• Review the security of SaaS applications, third-party integrations and data-sharing arrangements.
• Produce clear reporting on security risks, incidents, vulnerabilities and remediation progress.
• Support audits, customer assurance requests and relevant compliance activities.
• Develop technical security standards, operating procedures and guidance.

Skills

Identity and access management

Endpoint security

Cloud security

Vulnerability management

Incident response

Security reporting

Security standards

Job description

Proactive.IT Appointments Ltd. seeks an experienced Cyber Security Engineer in Northampton for a hybrid role combining on-site and remote work. You will reinforce security across identity, endpoints, clouds and business apps, aligning with least-privilege and zero-trust principles.

You will collaborate with IT operations, development and platform teams, handling incident response, vulnerability remediation and security design improvements while contributing to audits and compliance initiatives.