Hybrid Security Operations Engineer - MSSP & Response

RSM UK Deal Services; Crawley; Hybrid; GBP 60,000 - 90,000; Full time

Benefits offered by this job

Hybrid working

26 days holiday

Wellbeing benefits

Learning courses

Job summary

RSM UK is seeking a Cyber Security Operations Engineer to monitor, detect, and respond to security incidents in collaboration with our MSSP, protecting our digital infrastructure and information assets.

You will oversee security use cases, manage alerts, and drive continuous SecOps improvements across tools and processes, while aligning with corporate security policies and incident response plans.

Qualifications

• Strong networking and security fundamentals across protocols and architectures.
• Proven security operations experience applying core security principles.
• Hands-on with security tools: SIEM, firewalls, IDS/IPS, malware protection.
• Experience with Microsoft security stack and threat protection capabilities.
• Excellent analytical, problem-solving, and cross-team communication skills.

Responsibilities

• Define and govern security configurations across Microsoft security tools and key third-party platforms (e.g. Mimecast, Palo Alto, Cortex), including policies, settings, and exemptions.
• Oversee MSSP performance, ensuring effective monitoring, detection, and incident response, and acting as a key escalation and response partner during incidents.
• Prioritise and manage security use cases, rules, and alerts for MSSP implementation, with a focus on improving detection coverage and effectiveness.
• Develop and maintain SecOps continuous improvement (RSM UK and MSSP), including automation, optimisation of processes, and enhancement of detection capabilities.
• Define, document, and maintain operational knowledge, including incident response processes, run-books, and a central knowledge base for MDR/XDR alerts.

Skills

Networking fundamentals

Security operations

SIEM

Firewalls

IDS/IPS

Malware protection

Vulnerability scanning

Microsoft security stack

Analytical skills

Communication

Tools

SIEM

Firewalls

IDS/IPS

Vulnerability scanners

Endpoint protection

Job description

RSM UK is seeking a Cyber Security Operations Engineer to monitor, detect, and respond to security incidents in collaboration with our MSSP, protecting our digital infrastructure and information assets.

You will oversee security use cases, manage alerts, and drive continuous SecOps improvements across tools and processes, while aligning with corporate security policies and incident response plans.