Cyber Security Engineer

<p class="text-muted mb-3">Role: Cyber Security Engineer.</p>

<p class="text-muted mb-3">Location: Manchester - Hybrid 2 days in office.</p>

<p class="text-muted mb-3">Salary: £40k - £50k plus benefits.</p>

<p class="text-muted mb-3">JOB PURPOSE:</p>

<p class="text-muted mb-3">Our client is seeking a hands-on Cyber Security Engineer to help deliver the Cyber Security Roadmap and improve the security posture of our technology estate. This role will focus on implementing, configuring, maintaining and continuously improving security tooling and controls across OFG, with a particular emphasis on Microsoft 365, endpoint security, identity, productivity tools and wider infrastructure security.</p>

<p class="text-muted mb-3">You will play a key role in strengthening cyber security across the business by:</p>

<p class="text-muted mb-3">Delivering technical cyber security projects from the Cyber Security Roadmap, ensuring new controls and capabilities are implemented effectively and handed over into BAU operation.</p>

<p class="text-muted mb-3">Configuring, maintaining and improving OFG's security tools, including Microsoft Defender, Microsoft Intune, Entra ID, Microsoft 365 security and compliance capabilities, endpoint protection, vulnerability management and other security platforms.</p>

<p class="text-muted mb-3">Identifying opportunities to harden systems, reduce risk, improve secure configuration, automate repeatable tasks and strengthen the overall resilience of the OFG technology estate.Working closely with the Cyber Security Operations Manager, Group Head of Cyber, wider IT teams and external partners, you will help translate security</p>

<h5 class="fw-bold text-success mt-4 mb-3">requirements into practical technical controls. You will support project delivery, operational security activities, security improvement initiatives, incident remediation and the ongoing maintenance of secure configurations across the estate.</h5>

<p class="text-muted mb-3">This is a practical engineering role for someone who is comfortable working across Microsoft cloud security, endpoint management, security monitoring, vulnerability remediation and infrastructure hardening.</p>

<p class="text-muted mb-3">You will be expected to maintain awareness of the changing threat landscape and proactively recommend improvements that reduce cyber risk across the business.</p>

<p class="text-muted mb-3">Key Accountabilities:</p>

<p class="text-muted mb-3">Deliver assigned technical work packages from the Cyber Security Roadmap, ensuring activities are planned, implemented, tested, documented and transitioned into BAU support.</p>

<p class="text-muted mb-3">Implement, configure and maintain security tooling across the OFG estate, including Microsoft Defender, Microsoft Intune, Entra ID, Microsoft 365 security and compliance features, endpoint security, vulnerability management and related platforms.</p>

<p class="text-muted mb-3">Identify, assess and deliver practical security improvements across devices, identities, applications, productivity tools, cloud services and infrastructure.</p>

<p class="text-muted mb-3">Configure and harden Microsoft 365, Entra ID, Intune and Defender capabilities in line with security best practice, risk priorities and agreed standards.</p>

<p class="text-muted mb-3">Support BAU security operations by maintaining security tooling, reviewing alerts, improving detections, remediating weaknesses and ensuring security controls continue to operate effectively.</p>

<p class="text-muted mb-3">Work with IT teams to remediate vulnerabilities, configuration weaknesses, insecure defaults and gaps identified through security monitoring, assessments, audits or incident reviews.</p>

<p class="text-muted mb-3">Support security incidents by providing technical investigation, containment, remediation and evidence gathering where required.</p>

<p class="text-muted mb-3">Produce and maintain technical documentation, configuration standards, operational procedures, implementation notes and support handover materials.</p>

<p class="text-muted mb-3">Provide practical security advice to IT colleagues and project teams, helping ensure security</p>

<h5 class="fw-bold text-success mt-4 mb-3">requirements are considered during design, implementation and change activities.</h5>

<p class="text-muted mb-3">Support the maintenance of cyber security accreditations, standards and frameworks relevant to the business, including Cyber Essentials, Cyber Essentials Plus, CIS Controls.</p>

<p class="text-muted mb-3">Contribute to continuous improvement by identifying opportunities to automate repeatable tasks, improve monitoring, reduce manual effort and increase the maturity of security operations.</p>

<p class="text-muted mb-3">What we're looking for:</p>

<p class="text-muted mb-3">Practical experience administering, configuring or improving Microsoft 365 security controls.</p>

<p class="text-muted mb-3">Experience with Microsoft Defender capabilities, such as Defender for Endpoint, Microsoft 365 Defender, alert investigation, advanced hunting or device security improvement.</p>

<p class="text-muted mb-3">Experience supporting vulnerability management activity, including assessing findings, prioritising remediation, tracking progress and improving secure configuration.</p>

<p class="text-muted mb-3">Experience in security monitoring, alert triage, incident support or technical investigation, with the ability to act as an SME who junior members can escalate to.</p>

<p class="text-muted mb-3">Someone who has good analytical and problem-solving skills, with the ability to investigate issues, identify root causes and recommend practical, risk-based improvements.</p>

<p class="text-muted mb-3">Is confident working with IT colleagues, project teams and suppliers to deliver secure technology change, explain technical risks clearly and support agreed remediation activity.</p>

<p class="text-muted mb-3">Someone organised, detail-focused and able to balance project delivery, BAU security activity and urgent remediation work in a busy environment.</p>

<p class="text-muted mb-3">Ideally have relevant certifications such as Microsoft Security Operations Analyst Associate, Microsoft Azure Security Engineer Associate, CompTIA Security+, CISSP, SSCP or equivalent practical experience.INDIT</p>

<p class="text-muted mb-3">Planet Recruitment acts as an employment agency for permanent recruitment and an employment business for the supply of temporary workers. Planet Recruitment is an Equal Opportunities Employer.</p>

<p class="text-muted mb-3">By applying for this role your details will be submitted to Planet Recruitment. Our Candidate Privacy Information Statement explains how we will use your information.</p>

<p class="text-muted mb-3">Only candidates with the relevant skills and experience will be contacted after application, if you do not hear back from us within 7 days you have unfortunately been unsuccessful in your application.</p>

<p class="text-muted mb-3">Please note that no terminology in this advert is intended to discriminate on the grounds of a person's gender, marital status, race, religion, colour, age, disability or sexual orientation. Every candidate will be assessed only in accordance with their merits, qualifications and abilities to perform the duties of the position</p>