Salary; Up to £60,000 DOE
Hybrid Role; Required to travel to our Peterborough offices or our London clients at least one day per week.
About Us: Technology Consulting Services (TCS) is an innovative consultancy providing cutting-edge technology solutions to a growing client base. We specialise in cybersecurity, cloud computing, and digital transformation, ensuring businesses remain secure in an ever-evolving threat landscape. As we continue to expand, we are looking for a Cyber Security Engineer to enhance our security capabilities, support our clients and help safeguard critical systems and data.
The Opportunity: This role offers an exciting opportunity to work on a diverse range of security initiatives, ensuring the protection of key systems, networks, and data.
As a Cyber Security Engineer, you will be responsible for:
• Incident response • Risk management • Vulnerability assessment • Setup and monitoring of security tooling
You will work closely with IT teams, security analysts, and stakeholders to strengthen the security posture of our clients.
This hybrid role requires candidates to work remotely, with one day a week travel to client sites.
Responsibilities:
Cyber Incident Management:
• Lead incident response efforts, including threat analysis and remediation. • Update and maintain incident response playbooks and runbooks. • Liaise with the Security Operations Centre (SOC) to analyse and resolve security threats. • Monitor Endpoint Detection & Response (EDR) solutions such as Microsoft Defender to detect and mitigate cyber threats.
Cyber Security Operations:
• Deliver and maintain cybersecurity services across the enterprise. • Monitor security queues, investigate alerts, and respond to security incidents. • Provide vulnerability management reporting, analysing security gaps, and working with IT teams to remediate issues. • Manage penetration testing processes and report on identified risks. • Produce security KPIs and metrics to measure and improve cybersecurity effectiveness.
Cyber Security Risk & Compliance Management:
• Maintain and update the cyber security risk register. • Ensure compliance with ISO 27001 standards, GDPR, and governance frameworks. • Conduct risk assessments for system designs and new technology implementations. • Work with internal teams and external vendors to assess and mitigate security risks. • Conduct supplier security assessments, ensuring third-party security risks are managed.
Security Design & Governance:
• Assess IT designs and solutions for security risks and recommend mitigation strategies. • Define security standards and develop cybersecurity policies based on ISO 27001 and GDPR best practices. • Promote secure coding, infrastructure, and network principles across development and operational teams.
Security Engineering & Tooling:
• Evaluate, recommend, and implement security tools and technologies to enhance cyber resilience. • Continuously improve security policies, configurations, and automation workflows. • Work with IT teams to integrate security solutions within the enterprise network and infrastructure. • Conduct proof-of-concept testing for new security solutions and provide recommendations for deployment. • Ensure security tool configurations align with industry best practices and organizational policies.
Essential Skills & Experience:
• Strong analytical skills, with the ability to interpret complex technical issues and propose effective security solutions. • Proficiency in Microsoft Stack, including Azure, Active Directory, and O365 Security Controls. • Familiarity with Microsoft Defender EDR solutions, including endpoint security monitoring and threat mitigation. • Solid understanding of cyber security concepts, with the ability to communicate risks to both technical and non-technical stakeholders. • Experience in reviewing system designs for security risks and implementing best practices. • Knowledge of hybrid cloud architectures (AWS & Azure) and their associated vulnerabilities. • Strong working knowledge of ISO 27001 standards, GDPR compliance, and Governance, Risk, and Compliance (GRC) frameworks. • In-depth understanding of cyber incident management, including threat hunting and incident response. • Experience with security risk assessments and developing security controls aligned with ISO 27001 and GDPR. • Scripting & automation skills (e.g., PowerShell, KQL, or Python) for security monitoring and investigations.
Desirable Skills & Qualifications:
Certifications such as:
• CCNA, CompTIA Security+, CompTIA Network+
• Relevant Microsoft Security certifications (e.g., Microsoft Certified: Security, Compliance, and Identity Fundamentals)
• AWS, CEH, SANS, or other relevant cyber security qualifications
• Cyber Security Undergraduate Degree/Apprenticeship or equivalent professional experience.
What We Offer:
• A competitive salary of up to £60,000/year (dependent on experience).
• Flexible hybrid working arrangements, allowing work-from-home with weekly office collaboration.
• Opportunities to work on diverse and challenging security projects in a dynamic environment.