Description:
The Security Engineer is responsible for ensuring robust cybersecurity operations through proactive threat detection, effective incident response, and comprehensive risk management. This role works closely with IT and Security teams to identify vulnerabilities, implement security best practices, and protect organisational and client assets.
The role requires hands-on experience with leading security technologies and operational platforms, with a strong focus on solutions from Microsoft, Fortinet, and Sophos, while driving continuous improvement in security posture and compliance.
Key Deliverables
1. Stakeholder Collaboration & Communication
· Work closely with IT and Security teams to enhance overall security posture.
· Maintain clear and effective communication using collaboration tools such as Microsoft Teams, CRM platforms, and Service Desk systems.
2. Continuous Improvement & Compliance
· Stay current with emerging cybersecurity threats, technologies, and industry best practices.
· Conduct regular vulnerability audits to ensure compliance with industry standards and regulatory requirements.
· Research, evaluate, and recommend innovative security solutions to enhance organisational resilience.
3. Security Operations, Threat Detection & Incident Response
· Perform real-time threat monitoring, detection, and response activities.
· Ensure security operations align with industry best practices and compliance standards.
· Lead and execute incident response activities from detection through to resolution.
· Maintain accurate and up-to-date documentation for internal security controls and client security operations.
· Conduct security assessments, including Microsoft 365 tenant evaluations and network security reviews.
· Manage customer Security Posture Management in line with contractual requirements.
4. Threat Hunting & Vulnerability Management
· Proactively identify and mitigate cybersecurity threats before escalation.
· Analyse network traffic, endpoint behaviour, and security logs to detect advanced threats.
· Manage vulnerability assessments and ensure timely remediation of identified weaknesses.
· Utilise leading SOC SaaS platforms such as Microsoft Defender, Fortinet, and Sophos to strengthen security defences.
· Provide remediation assistance to internal teams and customers where required.
5. Prevention & Risk Management
· Design and implement proactive security controls to prevent cyber threats.
· Manage identity and access management (IAM), email security, data protection, and endpoint security solutions.
· Conduct IT risk assessments and recommend appropriate mitigation strategies.
· Ensure secure configurations across operating systems, networks, and ap