Senior Cyber Security Engineer Full Time

Spencer Rose Ltd

Senior Cyber Security Engineer

City of London (Hybrid)

£70,000 – £75,000 per annum + annual discretionary bonus

On behalf of a Leading financial services client, we have an exciting opportunity for a Senior Cyber Security Engineer. This role is responsible for performing all activities of the Security Engineering squad.

Due to the organisation operating a Hybrid work model, you must be within commutable distance of their City of London offices and willing to be office based at least 2 days per week.

Responsibilities:

• Lead Engineering designs and delivery to meet or exceed business requirements and the businesses security objectives.
• Managing relationships with our security partners including the Security Operations Centre to ensure that our security tools are configured appropriately.
• Driving process improvements through the effective use of monitoring & metrics.
• Provide security guidance and expertise to ensure project roadmaps encompass the required security controls.
• Design and implement technology solutions and systems to meet the security requirements of the group, both individually and as part of a project or BAU team.
• Devise innovative processes, standardization & progressive governance practices.
• Identity areas of improvement within the IT landscape, engineering solutions and guiding the execution of those designs through successful implementation.
• Identify new opportunities and improvements in current practices and processes.
• Serve as a technical security SME to advise on security designs for new and existing architecture and services, and ensure requirements are incorporated into designs.
• Identify, assess, document, manage, escalate, and report the risks associated with my role and business area, ensuring an appropriate control environment.
• Act as an escalation point of contact for any issues or problems reported by Internal Clients, External Clients, Third Party Suppliers, and company employees.
• Provide support for engineering, operations, and security teams to resolve security events.
• Oversee IT systems risk assessments and control validation.

Skills/Experience required:

• 5+ years of experience in technical information security role, and 3+ of experience with regulatory compliance and information security management frameworks (eg, IS027001, PCI-DSS, NIST, etc.) as well as use of Agile and Azure DevOps.
• Demonstrable experience in team management (advantageous)
• You will possess one or more the following certifications: Certified Cloud Security Professional (CCSP), Certified Ethical Hacker (CEH), Certified Information Systems Security Professional (CISSP), Microsoft Azure Security Engineer (AZ-500), System Security Certified Practitioner (SSCP)
• Understanding of corporate governance frameworks, key Security standards such as ISO27001, SANS, PCI-DSS and NIST, and the ISC2 Common Body of Knowledge.
• SME level knowledge of SIEM configuration & management experience (eg, Splunk) with strong conceptual knowledge and hands on experience.
• Experience of identity-based access controls (Zero trust).
• Knowledge and experience of the Microsoft Defender Security Suite including Defender for Endpoint, Defender for Office 365, Defender for Cloud Apps, Defender for Identity, Purview, Compliance and Security Centre, and Sentinel, and knowledge of cloud computing and the associated security risk and control considerations.
• Knowledge of endpoint security and device hardening, including Windows, Mac, iOS, Android and Virtual Desktops. (MEM/Intune).
• Proven expertise in the Microsoft 365 E5 Security stack.
• Breadth of subject matter expertise across the following technologies, systems, and processes: Vulnerability management, TCP/IP, LAN and WAN networking, Network Security (Firewalls, IDS/IPS), DLP, Endpoint security, Web and Email security, Identity and Access Management, Cryptography, and key management.
• Scripting skills eg, PowerShell or Python.
• Confident running tools like Nmap and Wireshark, capturing, reading, and analysing PCAPs, knowledge of TCP/IP stack.
• Have good knowledge of privileged access management, vulnerability management, secrets management, access control and associated tooling (Rapid7, Qualys, Thycotic).