Information and Cyber Security Operations Engineer

RSM UK; Crawley; Hybrid; GBP 45,000 - 65,000; Full time

Benefits offered by this job

Hybrid work

26 days holiday

Wellbeing benefits

Courses on demand

Job summary

RSM UK is seeking a Cyber Security Operations Engineer to monitor, detect and respond to security incidents in collaboration with our MSSP. You will define configurations across Microsoft tools and third‑party platforms, oversee MSSP performance, and continuously improve SecOps capabilities.

The role requires hands-on security operations experience, configuring detection rules, incident response, and strong collaboration across departments to protect our digital infrastructure.

Qualifications

• Strong understanding of networking and security fundamentals.
• Proven experience in security operations and incident response.
• Hands-on expertise with security tools such as SIEM, firewalls, IDS/IPS, malware protection, and vulnerability scanning.
• Experience with Microsoft security stack and threat protection capabilities.

Responsibilities

• Define and govern security configurations across Microsoft security tools and key third‑party platforms.
• Oversee MSSP performance, ensuring monitoring, detection, and incident response.
• Prioritise and manage security use cases, rules and alerts for MSSP implementation.
• Develop and maintain SecOps continuous improvement and automation.
• Define, document and maintain incident response processes and run-books.

Skills

Networking fundamentals

Security operations

SIEM

Firewalls

IDS/IPS

Malware protection

Vulnerability scanning

Microsoft security stack

Analytical thinking

Communication

Tools

Microsoft security stack

Job description

As one of the world's largest networks of audit, tax and consulting firms, RSM delivers big ideas and premium service to help middle-market businesses thrive. We are a fast-growing firm with big ambitions -- we have a clear goal to become the premium adviser to the middle market, globally. This vision touches everything we do, motivating and inspiring us to become better every day. If you are looking for a firm where you can build a future and make an impact, then RSM is the place for you.

Make an Impact at RSM UK

The Cyber Security Operations Engineer will be responsible for working in conjunction with our MSSP to monitor, detect and respond to security incidents to protect our systems, networks and information assets. This role involves working closely with our MSSP and various departments to ensure the security of our digital infrastructure and compliance with security policies.

You’ll Make An Impact By

• Define and govern security configurations across Microsoft security tools and key third‑party platforms (e.g. Mimecast, Palo Alto, Cortex), including policies, settings, and exemptions.
• Oversee MSSP performance, ensuring effective monitoring, detection, and incident response, and acting as a key escalation and response partner during incidents.
• Prioritise and manage security use cases, rules, and alerts for MSSP implementation, with a focus on improving detection coverage and effectiveness.
• Develop and maintain SecOps continuous improvement (RSM UK and MSSP), including automation, optimisation of processes, and enhancement of detection capabilities.
• Define, document, and maintain operational knowledge, including incident response processes, run-books, and a central knowledge base for MDR/XDR alerts.

What We Are Looking For

Are you someone who thrives on variety, loves learning new things, and enjoys connecting with people? If you can spot inefficiencies in everyday life and are passionate about making improvements, this role is perfect for you!

• We value diverse experiences and perspectives. Here’s what we’re looking for in our ideal candidate:
• Strong understanding of networking and security fundamentals, including protocols, architectures, and security methodologies.
• Proven experience in security operations, with solid application of core security principles and best practices.
• Hands-on expertise with security tools such as SIEM, firewalls, IDS/IPS, malware protection, and vulnerability scanning.
• Experience with Microsoft security stack, including its core security and threat protection capabilities.
• Excellent analytical, problem-solving, and communication skills, with the ability to collaborate effectively across teams and respond to incidents.

What We Can Offer You

We recognise that our people are our most important assets. That’s why we offer a flexible reward and benefits package that will help you have fulfilling experience, both in and out of work.

• Hybrid and Flexible working
• 26 Days Holiday (with the option of purchasing additional days)
• Lifestyle, Health, and Wellbeing including financial wellbeing benefits such as financial tools, electric car scheme and access to a virtual GP
• Access to a suite of 300+ courses on demand developed by our inhouse Talent Development team

Diversity and Inclusion at RSM

At RSM, we want to create a strong sense of belonging so that people of all identities, backgrounds, and cultures feel they can bring their true self to work. Our clients come from all walks of life. We aim to achieve that same diversity of background, experience and perspective in our own teams, so that we can genuinely understand our client's needs. Diverse teams bring a broader range of ideas and insights to work. That's why we're working together to ensure our firm's principles and processes support a firm culture that embraces difference and strengthens inclusion.