Information and Cyber Security Operations Engineer

RSM UK; Greater London; Hybrid; GBP 60,000 - 90,000; Full time

Benefits offered by this job

Hybrid and Flexible working

26 days holiday (with purchase option)

Wellbeing benefits and financial tools

Access to 300+ on-demand courses

Job summary

RSM UK is seeking a Cyber Security Operations Engineer to work with our MSSP to monitor, detect, and respond to security incidents protecting our systems, networks and information assets. You will collaborate with multiple departments to ensure compliance with security policies and strengthen our digital infrastructure.

You’ll define security configurations across Microsoft tools and third-party platforms, oversee MSSP performance, and drive continuous improvement of SecOps processes.

Qualifications

• Proven experience in security operations and incident response.
• Hands-on experience with SIEM, firewalls, IDS/IPS and vulnerability scanning.
• Strong understanding of networking protocols, architectures and security methodologies.
• Experience with Microsoft security stack and threat protection capabilities.
• Excellent analytical and communication skills for cross-team collaboration.

Responsibilities

• Define and govern security configurations across Microsoft security tools and key third-party platforms.
• Oversee MSSP performance and act as escalation/response partner during incidents.
• Prioritise and manage security use cases, rules, and alerts for MSSP.
• Develop and maintain SecOps continuous improvement, including automation and process optimisation.
• Maintain incident response processes, run-books, and a central knowledge base.

Skills

Security operations

Incident response

Networking fundamentals

Analytical thinking

Team collaboration

Education

Bachelor’s degree in a relevant field

Tools

SIEM

Firewalls

IDS/IPS

Microsoft security stack

Mimecast

Palo Alto

Cortex

Job description

As one of the world's largest networks of audit, tax and consulting firms, RSM delivers big ideas and premium service to help middle-market businesses thrive. We are a fast-growing firm with big ambitions - we have a clear goal to become the premium adviser to the middle market, globally. This vision touches everything we do, motivating and inspiring us to become better every day. If you are looking for a firm where you can build a future and make an impact, then RSM is the place for you.

The Cyber Security Operations Engineer will be responsible for working in conjunction with our MSSP to monitor, detect and respond to security incidents to protect our systems, networks and information assets. This role involves working closely with our MSSP and various departments to ensure the security of our digital infrastructure and compliance with security policies.

You’ll make an impact by

• Define and govern security configurations across Microsoft security tools and key third-party platforms (e.g. Mimecast, Palo Alto, Cortex), including policies, settings, and exemptions.
• Oversee MSSP performance, ensuring effective monitoring, detection, and incident response, and acting as a key escalation and response partner during incidents.
• Prioritise and manage security use cases, rules, and alerts for MSSP implementation, with a focus on improving detection coverage and effectiveness.
• Develop and maintain SecOps continuous improvement (RSM UK and MSSP), including automation, optimisation of processes, and enhancement of detection capabilities.
• Define, document, and maintain operational knowledge, including incident response processes, run-books, and a central knowledge base for MDR/XDR alerts.

What we are looking for

• Strong understanding of networking and security fundamentals, including protocols, architectures, and security methodologies.
• Proven experience in security operations, with solid application of core security principles and best practices.
• Hands-on expertise with security tools such as SIEM, firewalls, IDS/IPS, malware protection, and vulnerability scanning.
• Experience with Microsoft security stack, including its core security and threat protection capabilities.
• Excellent analytical, problem-solving, and communication skills, with the ability to collaborate effectively across teams and respond to incidents.

Are you someone who thrives on variety, loves learning new things, and enjoys connecting with people? If you can spot inefficiencies in everyday life and are passionate about making improvements, this role is perfect for you!

What we can offer you

• Hybrid and Flexible working
• 26 Days Holiday (with the option of purchasing additional days)
• Lifestyle, Health, and Wellbeing including financial wellbeing benefits such as financial tools, electric car scheme and access to a virtual GP
• Access to a suite of 300+ courses on demand developed by our inhouse Talent Development team

Diversity and Inclusion at RSM

At RSM, we want to create a strong sense of belonging so that people of all identities, backgrounds, and cultures feel they can bring their true self to work. Our clients come from all walks of life. We aim to achieve that same diversity of background, experience and perspective in our own teams, so that we can genuinely understand our client's needs. Diverse teams bring a broader range of ideas and insights to work. That’s why we’re working together to ensure our firm's principles and processes support a firm culture that embraces difference and strengthens inclusion.

At RSM we work hard to create an environment where our people can make a difference - to themselves, their career, their teams, and to the success of our firm and clients. We support all our people to work flexibly, to manage their family and other responsibilities alongside their work commitments; we believe this is key to achieving an inspiring and fulfilling working environment.