Cyber Security Engineer

Cyber Security Engineer

 

Role Profile

Cyber Security Engineer

 

 

Contract Type: Permanent

Closing Date: 12th October 2026

(Apply early as this role may close sooner if demand is high and we have enough suitable candidates.)

Role profile Job title: Cyber Security Engineer

Hours: 35 hours a week

Salary: £53,966

Role Purpose

Location (s): Ty Gwyn and hybrid working (role specific)

Reporting to the Infrastructure Manager. The Cyber Security Engineer is responsible for designing, implementing, monitoring and continually improving the organisation's cyber security capabilities across Microsoft Azure and the wider Microsoft security stack.

The role will act as the technical lead for cyber security, ensuring that cloud platforms, identities, devices, networks, applications and data are protected against evolving threats. The postholder will provide expert guidance on security architecture, incident response, governance, risk management and compliance, ensuring security remains aligned with business objectives and regulatory requirements.

The role combines strategic security leadership with hands-on engineering and operational responsibilities. Working with internal and external stakeholders, you will evaluate and challenge existing processes and potential innovative digital platforms to ensure that every technology investment delivers measurable value for our customers, colleagues and the organisation.

 

 

Key Accountabilities and Responsibilities

Security Architecture & Engineering

Design, implement and maintain secure cloud architectures within Microsoft Azure. Lead the development and implementation of Zero Trust security principles across the organisation. Develop and maintain security baselines, standards and technical controls. Ensure security is embedded into all solution designs, projects and technology change initiatives. Provide security design assurance and technical approval for new systems and services.

Identity & Access Management

Lead the management of Microsoft Entra ID, Conditional Access, Privileged Identity Management (PIM) and Role- Based Access Control (RBAC). Implement and monitor least-privilege access models. Develop access governance, certification and privileged access processes. Manage identity protection controls and support secure authentication strategies.

 

 

 

Key Accountabilities and Responsibilities continued. Security Operations

Act as technical lead for cyber security incidents. Monitor, investigate and respond to security alerts and threats. Lead incident containment, eradication and recovery activities. Conduct root cause analysis and implement preventative measures. Work closely with third-party SOC, MDR and security partners where applicable.

Microsoft Security Stack Management

Administer and optimise: Microsoft Defender XDR, Defender for Endpoint, Defender for Cloud, Defender for Identity, Defender for Office 365, Microsoft Sentinel, Microsoft Purview, Azure Key Vault, Azure Firewall, Network Security Groups. Develop automated security monitoring, alerting and response capabilities in conjunction with our SOC/SIEM partner.

Governance, Risk & Compliance Support compliance with ISO 27001, 9001, ,Cyber Essentials Plus, UK GDPR, NIST Cyber Security Framework Relevant housing sector regulations Conduct security risk assessments and provide remediation recommendations. Maintain security policies, standards and procedures. Support internal and external audits.

 

 

 

Key Accountabilities and Responsibilities continued. Vulnerability & Threat Management

Lead vulnerability management activities across cloud, endpoint, server and application estates. Implement remediation plans and track risk reduction. Conduct threat hunting activities using Microsoft security tooling. Analyse threat intelligence and recommend appropriate controls.

Business Continuity & Resilience

Support cyber incident response, disaster recovery and business continuity planning. Participate in tabletop exercises and resilience testing activities. Ensure recovery processes are secure and regularly tested.

Security Awareness

Promote a positive security culture across the organisation. Deliver security awareness activities, guidance and training. Provide expert advice to both technical and non-technical stakeholders.

Leadership & Mentoring

Act as the organisation's technical security specialist. Co-own the company Cyber Security Strategy and the implementation of thereof. Mentor engineers and support the development of security skills across the Technology & Innovation team. Influence technology roadmaps and strategic security decisions.

 

 

 

Skills and Behaviours I put customers at the heart at everything we do, always providing excellent customer services. I have good analytical skills that can be used to identify trends, measure effectiveness, and I can drive improvements. I can make evidence-based decisions with sound judgement. I can solve problems providing a solution focused approach. I am resilient when faced with conflicting demands. I can engage and collaborate with others, building meaningful relationships to deliver outcomes. I can communicate at all levels to work effectively as part of a team to deliver services to our customers. I take accountability for my work and any issues that arise, following through to completion. I have good attention to detail and ability to process detailed information effectively. I am organised and structured with the ability to work autonomously, following established policies and procedures. I can align my behaviours with our Values, Be Bold, Be Fair and Be Kind. I embrace change positively, giving feedback and challenge as appropriate. I keep abreast and upto date of knowledge and regulatory requirements.

Personal Skills & Behaviours

BE BOLD

BE FAIR

BE KIND

 

 

Experience

Essential Significant experience in cyber security engineering within Microsoft Azure environments. Experience implementing enterprise security controls within cloud-first organisations. Proven experience managing security incidents and investigations. Strong experience with Microsoft security technologies. Experience working with security frameworks and regulatory requirements. Experience performing technical security assessments and risk analysis. Experience with security monitoring, threat detection and vulnerability management.

Essential Technical Knowledge Microsoft Azure security architecture. Microsoft Entra ID. Conditional Access. Privileged Identity Management. Microsoft Defender Suite. Microsoft Sentinel.

Personal Skills & Behaviours

BE BOLD

BE FAIR

BE KIND

 

 

Essential Technical Knowledge Microsoft Sentinel. Microsoft Purview. Azure networking and cloud security controls. Identity and Access Management. Security Operations and Incident Response. Secure configuration and hardening practices. Zero Trust architecture. Data protection and information security principles.

Desirable Experience within the housing, public sector or highly regulated environments. Experience working with Security Operations Centres (SOC). Experience with automation and security orchestration. Experience of penetration testing remediation programmes. Experience of AI and emerging technology security governance.

Personal Skills & Behaviours Continued

BE BOLD

BE FAIR

BE KIND

 

 

Qualifications Educated to Degree, in a computer related subject or equivalent experience.

Essential - Candidates must hold at least one o