Cyber Security Engineer

About the role

We are seeking a Cyber Security Engineer to help our clients strengthen the security, resilience and reliability of their digital environments. The role involves designing, implementing and continuously improving security controls across infrastructure, cloud, applications, networks and identity systems while working closely with IT, architecture and business teams.

Key responsibilities

• Manage defined cybersecurity workstreams independently, including planning, execution, documentation and quality assurance.
• Design, implement and improve security controls across infrastructure, cloud, endpoint, network and application environments.
• Support vulnerability management activities such as assessment, prioritisation, remediation follow‑up and risk reporting.
• Contribute to the implementation and optimisation of security tools including SIEM, EDR/XDR, IAM, firewalls, cloud security controls and monitoring solutions.
• Assist incident detection and response by defining playbooks, escalation flows, investigation steps and lessons learned.
• Collaborate with architects, IT teams, developers and business stakeholders to embed security‑by‑design principles.
• Translate technical risks into clear, decision‑oriented recommendations for technical and non‑technical audiences.
• Support compliance and governance activities linked to frameworks such as ISO 27001, NIST CSF, CIS Controls, OWASP and NIS2.
• Identify risks, dependencies and improvement opportunities and propose pragmatic mitigation actions.
• Coach junior colleagues or client team members on cybersecurity best practices, documentation and delivery standards.

Required profile

• 4+ years of experience in cybersecurity, security engineering, infrastructure security, cloud security, SOC engineering or a related technical security role.
• Hands‑on experience in at least one cybersecurity domain with a solid general understanding of the broader field.
• Ability to work autonomously and manage end‑to‑end workstreams.
• Strong communication skills to convey technical risks to both technical and non‑technical stakeholders.
• Experience coaching or mentoring junior team members.

Required skills

• SIEM platforms
• EDR/XDR solutions
• Identity and Access Management (IAM)
• Firewalls and network security controls
• Cloud security controls (AWS, Azure, GCP)
• Vulnerability management tools and processes
• Security monitoring and logging solutions
• Frameworks: ISO 27001, NIST CSF, CIS Controls, OWASP, NIS2