IT Cyber Security Engineer

Title: IT Cyber Security Engineer

Location: London/Leeds UK (Hybrid) – 3 Days Onsite

Duration: 2 Years Fix term Contract /Contract

Purpose

Provide hands-on technical cyber security expertise to protect the resilience and secure operation of UK's IT, applications, infrastructure and digital services. The role is the local interface with central and Group Cyber Security (SOC, CERT, specialist teams), making sure central policies, standards and controls are implemented locally.

Description

Key Accountabilities

• Engineering and operations: Act as local technical SME for IT . Implement, operate and improve security controls across EDR, IAM, MFA, PAM, network segmentation, email, cloud, monitoring/logging, vulnerability management and device controls. Work with infrastructure, application, cloud and network teams to harden systems.
• Vulnerability management: Support the end-to-end process across IT and, where appropriate, OT. Review findings, coordinate risk-based remediation with asset owners, validate fixes, support patching and hardening, and manage security exceptions.
• Incident management: Be the local technical interface with SOC/CERT. Support investigation, containment, recovery and lessons learned, and take part in incident exercises and resilience testing.
• OT / ICS security: Work with plant and engineering teams on IT segregation, secure remote access, legacy-system risk, asset visibility and monitoring, applying IEC 62443 and the NCSC CAF.
• Security architecture / cyber-by-design: Provide security input to projects and changes, review designs against standards, run proportionate assessments, and recommend pragmatic risk treatment.
• Risk, governance and assurance: Document technical risks, maintain risk registers, provide evidence for audits and assessments, contribute to standards and baselines, and track remediation.
• Group alignment: Translate central standards into practical local requirements, coordinate mandated controls, and flag where constraints need alternative controls or formal risk acceptance.

Skills and Knowledge

• Cyber: Vulnerability management, SIEM, EDR/XDR, incident response, IAM/MFA/PAM, network security, firewalls, Windows/Linux, cloud, email security, hardening, logging, cryptography, backup and resilience, Zero Trust.
• Frameworks: NCSC CAF, ISO 27001, Cyber Essentials/Plus, NIST CSF, OWASP, UK NIS regulations.
• Professional: Analytical and pragmatic, clear communicator from engineers to senior management, strong documentation, constructive challenge, works well in a matrix, and takes ownership.

Essential

• Hands-on cyber engineering in a medium or large, technically complex organisation.
• Implementing enterprise security controls.
• Vulnerability management and remediation.
• Supporting incident investigation and remediation.
• Working with infrastructure, network, cloud, identity and application teams.
• Security review of technical solutions.
• Turning policy into technical controls.
• Working with centrally provided cyber services.

Highly desirable

• Electricity, energy, utilities, CNI or another regulated industry.
• OT/ICS/SCADA exposure, ideally mixed IT/OT.