Senior Cyber Security Engineer

GCS; Windsor; Presencial; GBP 90.000 - 125.000; Jornada completa

Descripción de la vacante

GCS in Windsor is seeking a highly capable Senior Cyber Security Engineer to lead the design, implementation, operation, and continuous improvement of enterprise security across IT and OT environments. This hands-on role builds and maintains controls that enable early threat detection, rapid response, and measurable risk reduction.

The successful candidate will own BAU operations, drive automation, and collaborate with technology, OT, cloud, and security teams to ensure controls are effective,

Formación

• Proven experience in Security Engineering within a large enterprise.
• Strong background in Detection & Response Engineering and Security Operations.
• Experience designing, implementing, and supporting SIEM, SOAR, EDR, Email Security, and Identity Security platforms.
• Practical experience with cloud security, infrastructure security, network security, and endpoint security technologies.
• Knowledge of enterprise identity and privileged access management solutions, such as Entra ID and CyberArk.
• Experience identifying, mitigating, and managing cyber risks within complex digital environments.
• Understanding of both IT and OT environments.
• Ability to automate security processes using scripting, orchestration, or workflow technologies.
• Strong analytical, troubleshooting, and problem-solving skills.
• Excellent communication across technical and business teams.
• Experience in regulated industries and critical infrastructure environments.
• Mentoring junior engineers and leading security initiatives.
• Familiarity with ISO 27001, NIS, IEC 62443, CIS Controls, or NIST.

Responsabilidades

• Design, implement, configure, and maintain security controls across IT and OT environments.
• Engineer and improve detection and response capabilities through SIEM, EDR, SOAR, email security, identity, and infrastructure platforms.
• Develop and maintain high-quality detection use cases, alerting, enrichment processes, and automated response workflows.
• Own security technologies post-implementation, ensuring ongoing support and optimization.
• Ensure new security capabilities transition into BAU with proper processes and monitoring.
• Participate in a 24x7 on-call support rota.
• Monitor effectiveness of controls and identify opportunities to improve visibility and risk reduction.
• Leverage incidents, audits, threat intel, and risk assessments to enhance security capabilities.
• Drive automation to improve operational efficiency and reporting accuracy.
• Define and maintain operational procedures, standards, and engineering documentation.
• Collaborate with IT, OT, cloud, and security teams to maintain standards.
• Communicate risks and remediation activities to technical and non-technical stakeholders.
• Support audits, compliance reviews, and security assessments.
• Align designs with industry standards and regulatory requirements.

Conocimientos

Security engineering

Detection & response

Automation scripting

Educación

Bachelor's degree in Cyber Security / related field

Herramientas

SIEM

EDR

SOAR

Email Security

Identity Security

Entra ID

CyberArk

Descripción del empleo

We are seeking a highly capable Senior Cyber Security Engineer to play a key role in the design, implementation, operation, and continuous improvement of enterprise security capabilities across both IT and Operational Technology (OT) environments.

This is a hands-on engineering role focused on building and maintaining security controls that enable early threat detection, rapid response, and measurable cyber risk reduction. The successful candidate will work closely with technology, operational, and security teams to translate business requirements, regulatory obligations, and cyber risks into scalable, supportable, and effective security solutions.

Importantly, this role extends beyond project delivery. The successful individual will take ownership of the ongoing operation, optimisation, and support of security capabilities, ensuring that solutions transition successfully into business-as-usual (BAU) operations and continue delivering value over time.

Candidates must be eligible to obtain CTC clearance.

Key Responsibilities

• Design, implement, configure, and maintain security controls across enterprise IT and OT environments.
• Engineer and continuously improve detection and response capabilities through the integration of SIEM, EDR, SOAR, email security, identity, and infrastructure platforms.
• Develop and maintain high-quality detection use cases, alerting mechanisms, enrichment processes, and automated response workflows.
• Take ownership of security technologies once implemented, ensuring ongoing support, maintenance, optimisation, and operational effectiveness.
• Ensure all new security capabilities are successfully transitioned into BAU operations with appropriate processes, documentation, monitoring, and support models.
• Participate in a 24x7 on-call support rota to maintain security service availability and respond to platform health issues where required.
• Monitor the effectiveness of security controls and identify opportunities to improve visibility, resilience, and risk reduction.
• Use lessons learned from incidents, audits, threat intelligence, and risk assessments to enhance existing security capabilities.
• Drive automation initiatives to improve operational efficiency, response consistency, and reporting accuracy.
• Define and maintain operational procedures, standards, and engineering documentation.
• Collaborate with technology, infrastructure, OT, cloud, and security operations teams to ensure controls are deployed and maintained in line with agreed standards.
• Communicate technical risks, recommendations, and remediation activities effectively to both technical and non-technical stakeholders.
• Support internal and external audits, compliance reviews, and security assessments.
• Align control design and engineering practices with industry standards, regulatory requirements, and security frameworks.
• Ensure security solutions remain measurable, supportable, and aligned to organisational risk appetite.
• Provide technical leadership and guidance on security technologies, engineering best practices, and future capability development.

Experience Required

• Proven experience in Security Engineering within a large enterprise environment.
• Strong background in Detection & Response Engineering and Security Operations.
• Experience designing, implementing, and supporting SIEM, SOAR, EDR, Email Security, and Identity Security platforms.
• Practical experience with cloud security, infrastructure security, network security, and endpoint security technologies.
• Knowledge of enterprise identity and privileged access management solutions, such as Entra ID and CyberArk.
• Experience identifying, mitigating, and managing cyber risks within complex digital environments.
• Understanding of both traditional IT infrastructure and Operational Technology (OT) environments.
• Ability to automate security processes using scripting, orchestration, or workflow technologies.
• Strong analytical, troubleshooting, and problem-solving skills.
• Excellent communication skills with the ability to engage effectively across technical and business teams.
• Experience working within critical national infrastructure (CNI), regulated industries, manufacturing, utilities, transport, or other operationally intensive environments.
• Previous systems administration, infrastructure, networking, or platform engineering experience.
• Experience mentoring junior engineers or providing technical leadership within security teams.
• Exposure to large-scale transformation or security modernisation programmes.
• Familiarity with security frameworks and regulations such as ISO 27001, NIS, IEC 62443, CIS Controls, or NIST.

Qualifications & Certifications

• Degree in Cyber Security, Computer Science, Engineering, Information Technology, or a related discipline.
• Industry certifications such as:
• CISSP
• CCSP
• CompTIA Security+
• Microsoft SC-200
• Microsoft Azure Security Engineer Associate
• CyberArk Certifications
• Tenable Certifications

What Success Looks Like

The successful candidate will:

• Deliver security capabilities that are not only implemented effectively but are fully operationalised and embedded into BAU processes.
• Continuously improve detection, response, and security monitoring capabilities.
• Reduce operational risk through proactive engineering and automation.
• Ensure security platforms remain healthy, effective, and aligned to evolving threats and business requirements.
• Act as a trusted technical expert across security, IT, and operational technology teams.