An established organisation in the North East is seeking a proactive, hands‑on Cyber Security Engineer to strengthen its security posture and lead day‑to‑day cyber protection across its systems, networks, and cloud environment.
This is an opportunity to become the organisation’s internal cyber SME, shaping improvements, enhancing resilience, and working closely with colleagues across IT and the wider business.
This is a predominantly site based role so applicants must reside within a commutable distance of the office. Our client is unable to sponsor visas so candidates must have a permanent right to work in the UK.
The Role
Joining a close‑knit IT function, you will take responsibility for safeguarding the organisation’s infrastructure, monitoring threats, and driving security improvements across a predominantly Microsoft‑based environment. Working alongside a third‑party MDR provider, your work will span both operational activity and longer‑term enhancements—making this a varied and highly impactful opportunity.
Key Responsibilities
* Monitor, investigate, and respond to security alerts and potential incidents.
* Lead security remediation activity on escalated MDR incidents.
* Develop and enhance threat detection rules and use cases.
* Implement and maintain security controls across Microsoft 365, Azure, and hybrid infrastructure.
* Support secure configuration, IAM, cloud environments, patch management, and application security testing.
* Ensure compliance with standards such as Cyber Essentials, ISO 27001, SOC 2, and GDPR.
* Play a key role during high‑pressure incidents, managing both technical resolution and stakeholder communication.
* Participate in an IT on‑call rota
The Person
You’ll be an experienced, confident cyber security practitioner who is comfortable acting as the standalone specialist within a small team. You’ll bring a strong technical foundation and an ability to work across hybrid and legacy environments.
With a background in infrastructure or networking, you will possess:
* Strong experience with Microsoft‑centric environments (M365, Azure, Intune, security baselines).
* Knowledge of compliance frameworks (NCSC guidance, Cyber Essentials), MITRE ATT&CK, encryption, IAM and secure configuration principles.
* The ability to manage operational workload while progressing ongoing improvement initiatives.
* Strong communication and stakeholder‑engagement skills, making complex risks easy to understand.
A degree or cyber security certification is beneficial but not essential.
#J-18808-Ljbffr