Cyber Security Engineer - MS Sentinel, Defender, SSO, PKI, SC-100/200, CISSP - #2123665

IT Cyber Security Specialist / Cyber Security Engineer - CISSP, CEH, CCNA Security, Incident Response, Threat Monitoring, Vulnerability Management, Security Architecture, Azure, Windows Server Infrastructure. Permanent. London Hybrid. c.£90k - £100k + Bons +Benefits

Global Law Firm seeks an experienced IT Cyber Security Specialist to join its Infrastructure Engineering team, supporting and continually improving cybersecurity across a global IT environment.

Reporting to the Infrastructure Engineering Manager, you'll take ownership of cybersecurity controls and security architecture while working closely with Infrastructure Operations and other technology teams to identify vulnerabilities, respond to incidents and strengthen the firm's overall security posture.

This is a hands-on technical role covering Cyber Security Engineering, Incident Response, Threat Monitoring, Vulnerability Management and Security Architecture (Infrastructure focussed) using tools such as MS Defender and MS Sentinel. You'll work across a complex infrastructure environment, identifying and mitigating security risks, supporting major cyber incidents and contributing to strategic security and infrastructure projects. You'll also help develop security awareness, business continuity capabilities and ongoing improvements to the firm's security controls.

Key Responsibilities:

• Continuously review and improve the firm's cybersecurity posture from an infrastructure perspective and external security rating.
• Identify, assess and remediate vulnerabilities across hardware, software and infrastructure (Windows Server and Azure Cloud).
• Monitor emerging threats and lead or support Incident Response investigations and mitigation.
• Evaluate, test and recommend security enhancements, controls and threat prevention technologies.
• Identify security risks and exposures and develop measures to prevent future incidents.
• Lead CE+ accreditation and support security, risk and data protection requirements from a technical (Not GRC) perspective.
• Participate in and lead infrastructure lifecycle, security and technology projects.
• Provide 3rd Line / Major Incident support as a cybersecurity subject matter expert.
• Work with third-party suppliers and advise internal technical teams on security measures to resolve security and infrastructure issues.

We're looking for experienced Cyber Security engineer with strong technical infrastructure knowledge and proven experience across incident response, threat monitoring and vulnerability management. You will possess:

• Extensive experience in a similar role blending Cyber Security with core Wintel Infrastructure and Azure cloud engineering.
• Strong knowledge of modern security architecture, threat prevention techniques and incident response.
• Strong Windows Server 2016/2019/2022 knowledge including Active Directory, DNS, DHCP, Intune, Group Policy, PKI, Entra and Azure SSO.
• Demonstrable experience across Cyber Security, Incident Response, Threat Monitoring and Vulnerability Management using tools such as MS Sentinel, MS Defender etc for threat hunting, vulnerability monitoring and security posture improvement.
• CISSP, CEH, CCNA Security, SC-100, SC200 or equivalent security certification.
• Experience designing, integrating and managing complex infrastructure and cloud solutions from a cyber security standpoint and advising technical infrastructure teams on security focussed designs and operations
• Strong communication skills with the ability to explain complex security issues to technical and non-technical audiences.
• Experience working with third-party providers across on-premise and cloud services.
• Strong planning skills and knowledge of ITIL processes and best practice.

This is an excellent opportunity to join a highly regarded global organisation where you'll play a key role in strengthening cybersecurity across a complex international IT environment, combining hands-on security engineering, incident response and strategic infrastructure projects.