Lead Cyber Security Engineer - Microsoft & Automation

Sword Group; Aberdeen City; Hybrid; GBP 65,000 - 90,000; Full time

Benefits offered by this job

Personalised Career Development

Flexible working

Private health & well-being benefits

Job summary

Sword Group is seeking a hands-on Cyber Security Engineer to lead security operations and own the day-to-day security controls across Microsoft security technologies. You will work closely with the Group CISO and IT to strengthen monitoring, detection, protection, and response, while driving automation and continuous improvement.

The role requires at least five years of hands-on experience, strong ownership, and the ability to operate autonomously in a complex environment.

Qualifications

• Hands-on security engineering or security operations experience.
• Experience using Microsoft security technologies at scale.
• Ability to own and drive security incidents end-to-end.
• Independent, proactive, and delivery-focused in a fast-paced environment.
• Experience with threat monitoring, detection, and response.

Responsibilities

• Own day-to-day security operations across Microsoft security technologies.
• Coordinate vulnerability management and system hardening activities.
• Drive automation to reduce manual work in security operations.
• Own security tooling and external provider interactions to improve outcomes.
• Lead incident investigations from detection to remediation and improvement.
• Support security awareness and secure working practices across the business.
• Ensure technical controls align with certifications and assurance activities.

Skills

Security operations

Microsoft security

Automation scripting

Incident response

Threat monitoring

Education

Security certifications

Tools

Microsoft Defender

Microsoft Sentinel

Entra ID

Azure security

KQL queries

Job description

Sword Group is seeking a hands-on Cyber Security Engineer to lead security operations and own the day-to-day security controls across Microsoft security technologies. You will work closely with the Group CISO and IT to strengthen monitoring, detection, protection, and response, while driving automation and continuous improvement.

The role requires at least five years of hands-on experience, strong ownership, and the ability to operate autonomously in a complex environment.