Information and Cyber Security Operations Engineer

RSM UK Deal Services; Crawley; Hybrid; GBP 60,000 - 90,000; Full time

Benefits offered by this job

Hybrid working

26 days holiday

Wellbeing benefits

Learning courses

Job summary

RSM UK is seeking a Cyber Security Operations Engineer to monitor, detect, and respond to security incidents in collaboration with our MSSP, protecting our digital infrastructure and information assets.

You will oversee security use cases, manage alerts, and drive continuous SecOps improvements across tools and processes, while aligning with corporate security policies and incident response plans.

Qualifications

• Strong networking and security fundamentals across protocols and architectures.
• Proven security operations experience applying core security principles.
• Hands-on with security tools: SIEM, firewalls, IDS/IPS, malware protection.
• Experience with Microsoft security stack and threat protection capabilities.
• Excellent analytical, problem-solving, and cross-team communication skills.

Responsibilities

• Define and govern security configurations across Microsoft security tools and key third-party platforms (e.g. Mimecast, Palo Alto, Cortex), including policies, settings, and exemptions.
• Oversee MSSP performance, ensuring effective monitoring, detection, and incident response, and acting as a key escalation and response partner during incidents.
• Prioritise and manage security use cases, rules, and alerts for MSSP implementation, with a focus on improving detection coverage and effectiveness.
• Develop and maintain SecOps continuous improvement (RSM UK and MSSP), including automation, optimisation of processes, and enhancement of detection capabilities.
• Define, document, and maintain operational knowledge, including incident response processes, run-books, and a central knowledge base for MDR/XDR alerts.

Skills

Networking fundamentals

Security operations

SIEM

Firewalls

IDS/IPS

Malware protection

Vulnerability scanning

Microsoft security stack

Analytical skills

Communication

Tools

SIEM

Firewalls

IDS/IPS

Vulnerability scanners

Endpoint protection

Job description

As one of the world's largest networks of audit, tax and consulting firms, RSM delivers big ideas and premium service to help middle-market businesses thrive. We are a fast-growing firm with big ambitions - we have a clear goal to become the premium adviser to the middle market, globally. This vision touches everything we do, motivating and inspiring us to become better every day. If you are looking for a firm where you can build a future and make an impact, then RSM is the place for you.

Make an Impact at RSM UK

The Cyber Security Operations Engineer will be responsible for working in conjunction with our MSSP to monitor, detect and respond to security incidents to protect our systems, networks and information assets. This role involves working closely with our MSSP and various departments to ensure the security of our digital infrastructure and compliance with security policies.

You’ll Make An Impact By

• Define and govern security configurations across Microsoft security tools and key third-party platforms (e.g. Mimecast, Palo Alto, Cortex), including policies, settings, and exemptions.
• Oversee MSSP performance, ensuring effective monitoring, detection, and incident response, and acting as a key escalation and response partner during incidents.
• Prioritise and manage security use cases, rules, and alerts for MSSP implementation, with a focus on improving detection coverage and effectiveness.
• Develop and maintain SecOps continuous improvement (RSM UK and MSSP), including automation, optimisation of processes, and enhancement of detection capabilities.
• Define, document, and maintain operational knowledge, including incident response processes, run-books, and a central knowledge base for MDR/XDR alerts.

What We Are Looking For

Are you someone who thrives on variety, loves learning new things, and enjoys connecting with people? If you can spot inefficiencies in everyday life and are passionate about making improvements, this role is perfect for you!

• We value diverse experiences and perspectives. Here’s what we’re looking for in our ideal candidate:
• Strong understanding of networking and security fundamentals, including protocols, architectures, and security methodologies.
• Proven experience in security operations, with solid application of core security principles and best practices.
• Hands-on expertise with security tools such as SIEM, firewalls, IDS/IPS, malware protection, and vulnerability scanning.
• Experience with Microsoft security stack, including its core security and threat protection capabilities.
• Excellent analytical, problem-solving, and communication skills, with the ability to collaborate effectively across teams and respond to incidents.

What We Can Offer You

• Hybrid and Flexible working
• 26 Days Holiday (with the option of purchasing additional days)
• Lifestyle, Health, and Wellbeing including financial wellbeing benefits such as financial tools, electric car scheme and access to a virtual GP
• Access to a suite of 300+ courses on demand developed by our inhouse Talent Development team

Diversity and Inclusion at RSM

At RSM, we want to create a strong sense of belonging so that people of all identities, backgrounds, and cultures feel they can bring their true self to work. Our clients come from all walks of life. We aim to achieve that same diversity of background, experience and perspective in our own teams, so that we can genuinely understand our client's needs. Diverse teams bring a broader range of ideas and insights to work. That's why we're working together to ensure our firm's principles and processes support a firm culture that embraces difference and strengthens inclusion.