Lead Cyber Security Engineer — Security Ops & Automation

Sword Services Greece S.A.; Aberdeen City; On-site; GBP 70,000 - 90,000; Full time

Benefits offered by this job

Career development

Flexible working

Private health

Job summary

Sword is seeking a Cyber Security Engineer to lead security operations and strengthen monitoring, detection, and response across our Microsoft security stack. The role requires hands-on delivery, ownership, and the ability to automate repetitive tasks while working with IT and security teams.

Reporting to the Group CISO, you will drive improvements across controls and assurance. You will engage in vulnerability management, security tooling, and incident response, with practical guidance for

Qualifications

• Hands-on cyber security engineering or security operations experience.
• Proven ability to own security tooling, detections, and incident response.
• Familiarity with Microsoft Defender, Sentinel, Entra ID, and Azure security.

Responsibilities

• Own day-to-day security operations across Microsoft security technologies.
• Lead vulnerability management, hardening, and remediation activities.
• Automate security workflows to reduce manual effort and improve tooling.
• Oversee incident investigations from detection to remediation and closure.
• Ensure security controls meet Cyber Essentials Plus and ISO 27001 requirements.
• Provide technical guidance for awareness, audits, and governance.

Skills

Microsoft security

Security operations

Incident response

Automation & scripting

Threat detection

Cloud security

Stakeholder comms

Job description

Sword is seeking a Cyber Security Engineer to lead security operations and strengthen monitoring, detection, and response across our Microsoft security stack. The role requires hands-on delivery, ownership, and the ability to automate repetitive tasks while working with IT and security teams.

Reporting to the Group CISO, you will drive improvements across controls and assurance. You will engage in vulnerability management, security tooling, and incident response, with practical guidance for