AVP Security Engineer - SGI - #2197117

Cyber Security Engineer (AVP)
Location: London
Type: Permanent

Required Background

• 5+ years' experience in Security Engineering, Security Automation, Security Operations, or related Cyber Security roles
• Experience delivering and implementing enterprise security technologies and controls
• Strong understanding of cyber threat detection, incident response, and security monitoring practices
• Experience working with recognised cyber security frameworks including:
  • NIST
  • MITRE ATT&CK
  • Cyber Kill Chain
• Experience working with infrastructure, cloud, and enterprise security environments
• Strong communication and stakeholder management skills

• SIEM implementation, configuration, and optimisation
• Security Orchestration, Automation and Response (SOAR)
• Threat Detection Engineering and Threat Hunting
• Security Monitoring and Incident Response
• Security Tooling Integration and Orchestration
• Threat Modelling and Risk Analysis
• Identity Threat Detection and Prevention
• Privileged Access Management (PAM)
• Key Management Systems (KMS)
• Endpoint Detection & Response (EDR)
• Security technologies including:
  • SIEM
  • EDR
  • DLP
  • Secure Email Gateways (SEG)
  • Proxy Technologies
• Microsoft Sentinel or equivalent SIEM platforms
• PowerShell and Python scripting
• Windows Event Collection and Log Management
• Active Directory security
• Networking and Security Protocols:
  • TCP/IP
  • Firewalls
  • VPNs
  • Proxies
• Cloud Security:
  • Azure
  • AWS
  • GCP
• Windows and Linux server administration

• Microsoft Security Certifications:
  • AZ-500
  • SC-200
  • SC-900
• CompTIA Security+
• Experience designing and implementing automated remediation workflows
• Experience with Logic Apps, Function Apps, and security automation tooling
• Advanced threat hunting and custom detection engineering experience
• Experience evaluating and implementing new cyber security solutions
• Knowledge of configuration drift monitoring and security analytics

• Develop and maintain threat detection, monitoring, and response capabilities
• Design and implement SIEM and SOAR solutions
• Build security automation and orchestration workflows
• Conduct threat modelling and security risk assessments
• Develop and optimise threat detection use cases and monitoring controls
• Lead threat hunting activities and proactive threat identification
• Integrate security tooling across the technology estate
• Support incident response and security operations activities
• Advise on security controls across infrastructure, applications, and cloud environments
• Evaluate emerging threats and contribute to continuous improvement of security capabilities