Overview
In this hands-on Cyber Security Engineer SME role, you own the operation, maintenance and lifecycle of enterprise security tooling within a growing security team. You’ll enable secure, resilient IT infrastructure across on-premise, cloud and hybrid environments while collaborating with cross-functional colleagues in London, India and beyond. Your work strengthens controls, supports audits and advances the organisation’s security capabilities. This role offers impact through tooling optimization and integration of new capabilities.
Responsibilities
- Manage day-to-day operation, maintenance, configuration and lifecycle of multiple enterprise security platforms
- Support red team tooling, digital forensics, EDR, threat monitoring and decoy systems
- Deploy, configure, patch, upgrade and maintain security tools including feature rollouts
- Investigate and troubleshoot platform issues independently, identifying root causes
- Understand tool interactions with AD, DNS, Group Policy, servers and networks
- Configure and maintain security controls including firewalls, MFA and email security policies
- Assist with log analysis, threat monitoring, incident investigation and vulnerability management
- Contribute to evaluation, deployment and integration of new cyber security technologies
- Support security assessments, audits and compliance with internal policies and standards
- Identify opportunities to automate tasks and improve tooling performance
- Collaborate with security specialists, infrastructure teams, vendors and risk stakeholders; produce documentation and handovers
Key requirements
- 8+ years’ experience in cyber security or information security with hands-on enterprise tooling experience
- Proven experience managing multiple security platforms in complex environments
- Strong understanding of Windows Server, Linux, infrastructure, networking and operating systems
- Ability to troubleshoot integrated environments including Active Directory, DNS and Group Policy
- Broad knowledge of security domains (governance, IAM, access controls, threat intelligence, risk, testing, incident management, vulnerability management, patching)
- Experience deploying, integrating and operating security tools in on-prem, cloud or hybrid environments
- Experience supporting security policies, standards, procedures and controls
- Familiarity with security frameworks and standards such as ISO 27001, NIST, CIS
- Experience working with cross-functional teams, vendors and audit/risk stakeholders
- Excellent communication skills for technical and non-technical audiences
- Desirable: red team tooling, forensic tools (EnCase), EDR (Trellix), MFA and cloud familiarity
- Certifications e.g., CISSP, Security+, CEH, GCIA (beneficial)
- Strong analytical and troubleshooting abilities
- Effective written and verbal communication
- Stakeholder management and collaboration
- Windows Server
- Linux
- Active Directory
…
