Cyber Security Engineer Level 2

Cybersecurity Engineer (Level 2)
Hybrid (Manchester)

As a Cybersecurity Engineer (Level 2), you'll play a key role in delivering, configuring and supporting Focus Group's managed security services. Acting as a Tier 2 escalation point, you'll provide advanced technical support, perform root-cause analysis on complex issues, and ensure customer environments remain secure, optimised and aligned to best practice.

Working closely with our Security Operations Centre (SOC), Engineering teams and Cybersecurity Engineering Lead, you'll support the deployment and management of security platforms including Bitdefender GravityZone, RocketCyber, SaaS Alerts, Mimecast, VulScan and vPentest.

This role is ideal for someone with strong technical troubleshooting skills, a passion for cyber security, and experience operating within an MSP, MSSP, SOC or IT infrastructure environment.

Key Responsibilities

Key Responsibilities

• Deploy, configure and validate managed security platforms including Bitdefender GravityZone, RocketCyber, SaaS Alerts, Mimecast, VulScan and vPentest
• Act as the Tier 2 escalation point for cyber security platform incidents and support requests
• Perform root-cause analysis to identify and resolve recurring technical issues
• Maintain the health and performance of customer security environments, ensuring agents, integrations and policies are operating effectively
• Configure and manage security policies, alerting, integrations and platform settings
• Analyse logs, alerts and security events to identify issues, misconfigurations and potential threats
• Support the optimisation of security tools to improve detection capability and service reliability
• Collaborate with SOC analysts, IT Support teams and third-party vendors to resolve complex issues
• Produce and maintain high-quality technical documentation, knowledge articles and support records
• Contribute to service improvements, operational processes and standard operating procedures
• Mentor and support Level 1 Engineers, helping develop technical capability across the team
• Continue professional development through training, certifications and hands-on experience

Skills, Knowledge & Expertise

Skills & Experience

Essential

• 2-4 years' experience within Cyber Security, IT Infrastructure, SOC or MSSP environments
• Hands-on experience deploying and supporting Bitdefender GravityZone EPP/EDR
• Strong understanding of Microsoft 365 Defender and Entra ID security administration
• Experience supporting security platforms such as RocketCyber, SaaS Alerts and Mimecast
• Knowledge of network security fundamentals and firewall technologies
• Ability to investigate security alerts, logs and technical incidents
• Experience with PowerShell, Python, KQL or similar scripting/query languages
• Strong troubleshooting and problem-solving skills with a structured approach to root-cause analysis
• Excellent organisational and documentation skills
• Ability to manage multiple priorities and own incidents through to resolution
• Strong communication and stakeholder management skills

Desirable

• CompTIA Security+, Microsoft SC-200, AZ-500 or equivalent cyber security certifications
• Experience with vulnerability management and remediation programmes
• Exposure to SOC operations, incident investigation or detection engineering
• Understanding of SIEM platforms and detection rule development
• Automation and scripting experience
• Familiarity with ServiceNow or other ITSM platforms
• Knowledge of Cyber Essentials, ISO 27001 and NIST frameworks
• Experience working on customer-facing cyber security projects

Job Benefits

• Holiday Allowance - 24 days + bank holidays + birthday leave. 
• Hybrid working options - performance depending. 
• Enhanced maternity, paternity and adoption leave. 
• Paid volunteering day * regular charity events.
• Wider company benefits across health, financial wellbeing, Pension etc.