Cyber Security Engineer – 11919JS

In this role you will strengthen security across identity, endpoints, cloud, and business applications to mitigate risks for a growing organisation. You’ll collaborate with IT operations, development, and external security partners to embed robust security practices. The position covers vulnerability management, incident response, and security design, with a hands-on approach to improving controls and remaining resilient. This hybrid Northampton role offers meaningful impact on overall security posture and incident readiness.

• Excellent benefits package

• Maintain and improve security controls across identity, endpoint, cloud and business applications
• Promote least-privilege and zero-trust by reviewing authentication and access
• Enhance endpoint security and device compliance
• Address security weaknesses with IT operations
• Assess cloud services for risks and misconfigurations
• Support secure design in development and platform delivery
• Coordinate remediation with owners and verify effectiveness
• Investigate security alerts and incidents with internal and external teams
• Maintain incident-response procedures and documentation
• Contribute to incident exercises and post-incident reviews
• Review SaaS, third-party integrations, and data-sharing security
• Produce reporting on risks, incidents, vulnerabilities, and remediation
• Support audits and compliance activities
• Develop technical security standards and SOPs

• 5 years of relevant cybersecurity/infra security experience
• Experience securing identity, productivity and collaboration services
• Strong understanding of identity and access management, MFA, conditional access, privileged access
• Experience securing Windows endpoints with modern device-management
• Experience with EDR/EDR-like technologies
• Experience prioritising and coordinating remediation of vulnerabilities
• Knowledge of public-cloud security concepts (identity, networking, logging, data protection, config)
• Understanding of common attack techniques and preventative/detective controls
• Experience investigating security events or supporting incident response
• Ability to evaluate findings and recommend improvements
• Ability to write clear technical documentation and risk summaries
• Strong communication with technical and non-technical colleagues

• strong communication
• team collaboration
• proactive problem-solving
• Windows endpoint security
• device-management platform
• endpoint detection and response (EDR) / extended detection and response (XDR)