Zero-Trust Security Engineer | ISO/27001 & Incident Response

Church International; Greater London; On-site; GBP 85,000 - 120,000; Full time

Job summary

Church International is seeking a Cybersecurity Engineer to implement and maintain robust security measures across its infrastructure in a regulated industry. You will work on transitioning to a zero-trust operating model, support ISO27001 certification efforts, and align with CIS controls.

You will maintain CrowdStrike, coordinate with the network team on posture management, and contribute to incident response and vulnerability management programs to elevate the firm’s security posture.

Qualifications

• Experience across vulnerability management, security operations, and incident response in a regulated environment is essential.
• Proven ability to implement and manage security tools and CIS controls.
• Track record in risk management and cybersecurity engineering activities.

Responsibilities

• Maintain CrowdStrike platform: configure EDR policies, tune SIEM rules, optimise performance.
• Collaborate with network engineers to implement posture management, segmentation, lateral movement controls, and firewalls.
• Lead or participate in incident response, perform root-cause analyses, and develop runbooks for incident handling.
• Monitor threats and analyse alerts; respond to incidents using CrowdStrike and other security tools.
• Conduct vulnerability scans and support remediation and risk mitigation efforts.

Skills

Vulnerability management

Security operations

Incident response

Risk management

Cybersecurity engineering

Tools

CrowdStrike

EDR

SIEM

NAC/ICE

Job description

Church International is seeking a Cybersecurity Engineer to implement and maintain robust security measures across its infrastructure in a regulated industry. You will work on transitioning to a zero-trust operating model, support ISO27001 certification efforts, and align with CIS controls.

You will maintain CrowdStrike, coordinate with the network team on posture management, and contribute to incident response and vulnerability management programs to elevate the firm’s security posture.