Cyber Security Engineer

You will join a UK-based cyber security engineering team to protect IT infrastructure for a major defence project. You’ll implement security controls, lead vulnerability management and incident response, and ensure compliance with frameworks such as CIS, NIST and STIG. This role combines hands-on security work with collaboration across engineering and governance teams to safeguard critical systems. You’ll work on a high-impact programme that supports UK government and partner nations, with opportunities to influence security posture and tooling choices.

• Contributory Pension Scheme
• Private Medical Insurance
• 33 days annual leave
• Flexible benefits
• Flexi-Time
• Cycle to work scheme

• Vulnerability scanning, reporting and remediation coordination
• Endpoint security management and policy updates
• Incident management, alert validation and ticket resolution
• System hardening and patch management
• Managing change from a security standpoint (SITT, ST&V activities)
• Participation in security-focused meetings and workshops
• Documentation of designs, procedures and compliance evidence

• Proven cyber security engineering experience across IT environments (on-prem and/or cloud)
• Hands-on experience with security tooling and policy implementation
• Knowledge of secure configuration and hardening, applying CIS/NIST/STIG benchmarks
• Vulnerability management and risk-based remediation with engineering teams
• Experience supporting incident response (detection, containment, lessons learned)
• Clear communication of technical security issues to non-experts and governance teams
• Experience producing audit-ready security documentation

• Clear communication
• Collaboration across cross-functional teams
• Analytical problem-solving
• Vulnerability management tooling and reporting
• Code scanning and security testing
• Endpoint protection and malware defense