Cyber Security Engineer IT Security Engineer

Cyber Security Engineer | IT Security Engineer

A self-starting Cyber Security Engineer required for a large Financial Services firm with 16 offices throughout the UK. This role is ideal for someone with a strong background in web application security, firewalls, vulnerability management, and penetration testing. You'll be part of an expanding team, working in a highly technical and collaborative environment, and will have the opportunity to research and implement the latest technologies in the industry.

Day to Day of the role:

• Carry out daily security engineering/operations tasks within an ITIL framework, promoting and adhering to workplace values.
• Analyse and recommend effective security controls, system hardening, and security improvement projects, focusing on application/web hosting security.
• Develop an understanding of threats, risks, vulnerabilities, and evolving attack vectors facing the business.
• Assist with security incident investigations in complex cross-technology environments.
• Work to defined SLAs & KPIs, maintaining accurate logs of security events and incidents.
• Represent Information Security at IT meetings.
• Manage patching, vulnerability analysis, and penetration testing, ensuring recommendations are risk-assessed and implemented promptly.
• Contribute to group security training and awareness campaigns.
• Review the market for effective information security solutions and assist in the annual review of suppliers' information security processes.
• Respond to client information security questionnaires and assist IT with Security Administration.

Required Skills & Qualifications:

• Experience in Security Engineering
• Detailed knowledge of security products.
• A good grasp and understanding of infrastructure and networking.
• Good understanding of IT Security best practices.
• Familiarity with common IT protocols, infrastructure, and systems.
• Collaborative work ethic with IT, teams, and end users.
• Relevant higher-level qualifications in Information Security (e.g., CISSP, SANS GCIA, Comptia Security+, CCNA/CCNP) or a desire to work towards them.
• Excellent communication skills and ability to maintain network diagrams.