Cyber Security Engineer

- Operate, maintain and enhance the firms cyber security controls across endpoint, email, identity, network, cloud, and application layers - Manage and integrate a broad ecosystem of third-party cyber security platforms, including managed detection and response services, email security gateways, and vulnerability management tools - Lead and support cyber security incident response activities, including investigation, containment, remediation, and post-incident review - Oversee security monitoring, alerting, and response processes, collaborating with managed service providers - Conduct and coordinate vulnerability assessment and remediation activities across infrastructure, endpoints, applications, and cloud services - Support regulatory, client, and internal audits (e.g. ISO 27001), including evidence gathering, control validation, and remediation planning - Maintain security policies, standards, procedures, and technical documentation on the IT Wiki - Work closely with infrastructure, applications, data, and supplier teams to embed security by design across projects and services - Provide third line support for security-related incidents and escalations from the Service Desk and wider IT teams - Assess and manage cyber security risks associated with new technologies, suppliers, and business initiatives - Support threat intelligence activities and ensure emerging threats are assessed for relevance to the firms environment - Provide guidance, mentoring, and knowledge sharing to improve cyber security awareness and capability across IT