Senior Cyber Security Engineer

About the role

The Senior Cyber Security Engineer will lead the development and implementation of the organisation’s cyber security capabilities, addressing the evolving threat landscape across vulnerability management, access control, security platform engineering and detection‑response activities. The role works closely with offensive security teams to translate Red/Purple team findings into an improved security posture.

Key responsibilities

• Design, build and maintain security platforms and related projects.
• Identify, assess and remediate vulnerabilities across the environment.
• Manage privileged access and ensure tooling effectiveness.
• Identify and implement improvements to existing security tools and controls.
• Develop strong relationships with business stakeholders and provide security tooling metrics.
• Review and contribute security input on architecture design briefs and technical solution documents.
• Collaborate with solution architects to embed security in system and cloud designs.
• Remediate findings from penetration test reports.
• Define and validate security controls across cloud environments, especially AWS.
• Stay current on cloud security best practices, emerging technologies and ATP TTPs.
• Support secure‑by‑design principles across projects.

Required profile

• 5‑8 years of hands‑on cybersecurity experience.
• Broad engineering background across multiple security domains.
• Proven experience implementing vulnerability management, SIEM, PAM, IDS/IPS, EDR, DLP, CNAPP and AV platforms.
• Intermediate knowledge of incident response for OS and network events.
• Comfortable working with Windows and Linux operating systems.
• Solid understanding of networking, Active Directory and web applications.
• Proficiency in at least one scripting or programming language (Python, PowerShell, Bash or Go).
• Experience reviewing and implementing cloud security controls and architecture design documents.
• Strong knowledge of AWS security services and controls (IAM, GuardDuty, SCPs, KMS).
• Familiarity with cloud‑native security frameworks and reference architectures.

Required skills

• Vulnerability Management
• SIEM
• PAM
• IDS/IPS
• EDR
• DLP
• CNAPP
• Antivirus (AV)
• Incident Response
• Windows
• Linux
• Networking
• Active Directory
• Web Applications
• Python
• PowerShell
• Bash
• Go
• AWS IAM
• AWS GuardDuty
• AWS Service Control Policies (SCPs)
• AWS KMS
• Cloud Security Controls
• Cloud‑native Security Frameworks
• Threat Modelling
• Secure Design Principles