Senior Cyber Security Engineer - Cloud & Incident Response

E1 Edf Trading Ltd; Greater London; Hybride; GBP 90 000 - 130 000; Plein temps

Résumé du poste

EDF Trading in London is seeking a senior security professional to act as a senior technical contributor within the global cyber security team, owning selected domains end-to-end and driving improvements to reduce risk. The role spans analyst and engineering tasks across tools, vulnerability management, web and email security, incident response, and threat-informed remediation.

You will collaborate with infrastructure, cloud, application, identity and business teams to identify issues,

Qualifications

• Operated as a senior technical contributor in cyber or infrastructure security.
• Owned or contributed to multiple cyber domains such as endpoint security or identity security.
• Used EDR tooling to investigate detections and improve controls.
• Applied threat intel and ATT&CK data to prioritise mitigations.
• Led investigations and incident response activities when required.
• Collaborated with cross-functional teams to improve security outcomes.

Responsabilités

• Own one or more cyber security domains end-to-end with risk and backlog management.
• Identify weaknesses and drive remediation with technical owners.
• Lead security improvement initiatives from design to implementation.
• Translate threat intel into practical control improvements with stakeholders.
• Maintain domain documentation, standards and improvement plans.
• Administer and tune security tools; design simple automations and dashboards.

Connaissances

Threat intelligence & MITRE ATT&CK

Incident response

Vulnerability management

Identity security

Security automation

Cloud security (Azure/M365)

Secure configuration & hardening

Scripting (PowerShell/Python)

Outils

CrowdStrike Falcon

Zscaler ZIA/ZPA

BloodHound Enterprise

PingCastle

Description du poste

EDF Trading in London is seeking a senior security professional to act as a senior technical contributor within the global cyber security team, owning selected domains end-to-end and driving improvements to reduce risk. The role spans analyst and engineering tasks across tools, vulnerability management, web and email security, incident response, and threat-informed remediation.

You will collaborate with infrastructure, cloud, application, identity and business teams to identify issues,