Cyber Security Engineer

Sword is a leading provider of business technology solutions within the Energy, Public and Finance Sectors, driving transformational change within our clients.  We use proven technology, specialist teams and domain expertise to build solid technical foundations across platforms, data, and business applications.  We have a passion for using technology to solve business problems, working in partnership with our clients to help in achieving their goals. We are delighted to present a newly created opportunity for a Cyber Security Engineer to join our internal security team. Reporting to the CISO and working closely with IT, you will help implement, maintain, and improve Sword’s technical security controls, with a strong focus on Microsoft security technologies. You will play an important role in strengthening monitoring, detection, protection, and response across the business. This is a mid-level role suited to someone with solid hands-on experience, a positive can-do attitude, and the ability to take ownership, work autonomously, manage workload effectively, and deliver results. It is an excellent opportunity for someone who wants to keep learning and continue building their career in cyber security engineering. Key responsibilities: Security Monitoring and Operations - Implement, administer, and improve day-to-day security operations across Microsoft security technologies including Microsoft Sentinel, Microsoft Defender, Conditional Access, Entra ID, and related Azure security capabilities, helping to strengthen monitoring, detection, protection, and response. Vulnerability Management and Hardening - Proactive and risk-based vulnerability management, including attack surface reduction, system hardening, remediation support, and cloud security posture improvement. Security Tooling and Service Support - Support the effective operation of security tooling and services delivered through a combination of internal teams and external providers, helping to maintain service quality, resolve technical issues, and improve day-to-day security outcomes. Incident Investigation and Response - Take ownership of the technical investigation and triage of security incidents, drive containment and remediation activities, and help improve detection and response capabilities through lessons learned, control improvements, and ongoing risk reduction. Technical Support for Security Awareness - Support the wider security function by contributing technical input to awareness activities, simulated phishing exercises, and secure working practices, helping colleagues understand security controls and common threats. Technical Compliance and Assurance Support - Support the wider security function by implementing and maintaining technical controls that align with internal security policies, certification requirements, and assurance activities, including supporting Cyber Essentials Plus readiness, evidence gathering, and remediation activities where needed. Technical Risk Assessment Support - Provide technical input into security risk assessments across projects, suppliers, and internal services, helping to identify vulnerabilities, assess exposure, and support practical remediation and hardening activities. Technical Support for Regulatory and Client Requirements - Support the implementation, maintenance, and evidencing of technical controls required to meet relevant legal, regulatory, and client security obligations. Supplier and Integration Security Support - Support technical reviews of supplier and partner services, integrations, and access arrangements, helping to identify security issues and ensure appropriate controls are implemented and maintained. Continuous Improvement and Automation - Identify opportunities to improve security tooling, detection logic, control effectiveness, and operational processes through tuning, automation, and incremental engineering enhancements. This is an excellent opportunity to work with a talented team, build hands-on experience across modern security technologies, and make a meaningful contribution to strengthening Sword’s cyber security capability. If you enjoy solving technical security challenges and want to keep developing your career, we would like to hear from you.