Security Operations & Threat Detection Engineer

TfW Business Daily Group; Pontypridd; On-site; GBP 90,000 - 120,000; Full time

Job summary

Transport for Wales is seeking a senior security engineering lead to own design authority and lifecycle management of technical security controls across TfW platforms. You will drive vulnerability management, collaborate with SOC/MSSP partners to enhance detection, and lead the integration of security technologies including EDR and IAM.

You will provide senior technical leadership during cyber security incidents, set secure configuration standards, and guide risk-based remediation with

Qualifications

• Professional cyber security certification or equivalent practical experience.
• Experience leading security engineering, operations, or improvement workstreams.
• Experience implementing and managing security controls across cloud and enterprise environments (M365, Azure, EDR, IAM, logging, SIEM).
• Experience managing vulnerability remediation programmes and risk-based prioritisation.

Responsibilities

• Own design authority and lifecycle management of security controls across TfW platforms.
• Drive vulnerability management across TfW technology services with governance and remediation.
• Develop monitoring and detection capabilities with SOC/MSSP partners for threat visibility.
• Lead integration strategy for security technologies including EDR, IAM, cloud security.
• Provide senior technical leadership during cyber security incidents and post-incident activities.
• Establish secure configuration standards and secure-by-default baselines.
• Embed secure-by-design principles across IT and Digital Services.
• Identify and manage technical security risks with system owners.

Skills

Security governance

Vulnerability management

Cloud security

SIEM/SOAR

Technical leadership

Stakeholder influence

Job description

Transport for Wales is seeking a senior security engineering lead to own design authority and lifecycle management of technical security controls across TfW platforms. You will drive vulnerability management, collaborate with SOC/MSSP partners to enhance detection, and lead the integration of security technologies including EDR and IAM.

You will provide senior technical leadership during cyber security incidents, set secure configuration standards, and guide risk-based remediation with