Cyber Security Engineer

 

Role Profile

Cyber Security Engineer

 

 

Contract Type: Permanent

Closing Date: 12th October 2026

(Apply early as this role may close sooner if demand is high and we have enough suitable candidates.)

Role profile Job title: Cyber Security Engineer

Hours: 35 hours a week

Salary: £53,966

Role Purpose

Location (s): Ty Gwyn and hybrid working (role specific)

Reporting to the Infrastructure Manager. The Cyber Security Engineer is responsible for designing, implementing, monitoring and continually improving the organisation's cyber security capabilities across Microsoft Azure and the wider Microsoft security stack.

The role will act as the technical lead for cyber security, ensuring that cloud platforms, identities, devices, networks, applications and data are protected against evolving threats. The postholder will provide expert guidance on security architecture, incident response, governance, risk management and compliance, ensuring security remains aligned with business objectives and regulatory requirements.

The role combines strategic security leadership with hands-on engineering and operational responsibilities. Working with internal and external stakeholders, you will evaluate and challenge existing processes and potential innovative digital platforms to ensure that every technology investment delivers measurable value for our customers, colleagues and the organisation.

 

 

Key Accountabilities and Responsibilities

Security Architecture & Engineering

Design, implement and maintain secure cloud architectures within Microsoft Azure. Lead the development and implementation of Zero Trust security principles across the organisation. Develop and maintain security baselines, standards and technical controls. Ensure security is embedded into all solution designs, projects and technology change initiatives. Provide security design assurance and technical approval for new systems and services.

Identity & Access Management

Lead the management of Microsoft Entra ID, Conditional Access, Privileged Identity Management (PIM) and Role- Based Access Control (RBAC). Implement and monitor least-privilege access models. Develop access governance, certification and privileged access processes. Manage identity protection controls and support secure authentication strategies.

 

 

 

Key Accountabilities and Responsibilities continued. Security Operations

Act as technical lead for cyber security incidents. Monitor, investigate and respond to security alerts and threats. Lead incident containment, eradication and recovery activities. Conduct root cause analysis and implement preventative measures. Work closely with third-party SOC, MDR and security partners where applicable.

Microsoft Security Stack Management

Administer and optimise: Microsoft Defender XDR, Defender for Endpoint, Defender for Cloud, Defender for Identity, Defender for Office 365, Microsoft Sentinel, Microsoft Purview, Azure Key Vault, Azure Firewall, Network Security Groups. Develop automated security monitoring, alerting and response capabilities in conjunction with our SOC/SIEM partner.

Governance, Risk & Compliance Support compliance with ISO 27001, 9001, ,Cyber Essentials Plus, UK GDPR, NIST Cyber Security Framework Relevant housing sector regulations Conduct security risk assessments and provide remediation recommendations. Maintain security policies, standards and procedures. Support internal and external audits.

 

 

 

Key Accountabilities and Responsibilities continued. Vulnerability & Threat Management

Lead vulnerability management activities across cloud, endpoint, server and application estates. Implement remediation plans and track risk reduction. Conduct threat hunting activities using Microsoft security tooling. Analyse threat intelligence and recommend appropriate controls.

Business Continuity & Resilience

Support cyber incident response, disaster recovery and business continuity planning. Participate in tabletop exercises and resilience testing activities. Ensure recovery processes are secure and regularly tested.

Security Awareness

Promote a positive security culture across the organisation. Deliver security awareness activities, guidance and training. Provide expert advice to both technical and non-technical stakeholders.

Leadership & Mentoring

Act as the organisation's technical security specialist. Co-own the company Cyber Security Strategy and the implementation of thereof. Mentor engineers and support the development of security skills across the Technology & Innovation team. Influence technology roadmaps and strategic security decisions.

 

 

 

Skills and Behaviours I put customers at the heart at everything we do, always providing excellent customer services. I have good analytical skills that can be used to identify trends, measure effectiveness, and I can drive improvements. I can make evidence-based decisions with sound judgement. I can solve problems providing a solution focused approach. I am resilient when faced with conflicting demands. I can engage and collaborate with others, building meaningful relationships to deliver outcomes. I can communicate at all levels to work effectively as part of a team to deliver services to our customers. I take accountability for my work and any issues that arise, following through to completion. I have good attention to detail and ability to process detailed information effectively. I am organised and structured with the ability to work autonomously, following established policies and procedures. I can align my behaviours with our Values, Be Bold, Be Fair and Be Kind. I embrace change positively, giving feedback and challenge as appropriate. I keep abreast and upto date of knowledge and regulatory requirements.

Personal Skills & Behaviours

BE BOLD

BE FAIR

BE KIND

 

 

Experience

Essential Significant experience in cyber security engineering within Microsoft Azure environments. Experience implementing enterprise security controls within cloud-first organisations. Proven experience managing security incidents and investigations. Strong experience with Microsoft security technologies. Experience working with security frameworks and regulatory requirements. Experience performing technical security assessments and risk analysis. Experience with security monitoring, threat detection and vulnerability management.

Essential Technical Knowledge Microsoft Azure security architecture. Microsoft Entra ID. Conditional Access. Privileged Identity Management. Microsoft Defender Suite. Microsoft Sentinel.

Personal Skills & Behaviours

BE BOLD

BE FAIR

BE KIND

 

 

Essential Technical Knowledge Microsoft Sentinel. Microsoft Purview. Azure networking and cloud security controls. Identity and Access Management. Security Operations and Incident Response. Secure configuration and hardening practices. Zero Trust architecture. Data protection and information security principles.

Desirable Experience within the housing, public sector or highly regulated environments. Experience working with Security Operations Centres (SOC). Experience with automation and security orchestration. Experience of penetration testing remediation programmes. Experience of AI and emerging technology security governance.

Personal Skills & Behaviours Continued

BE BOLD

BE FAIR

BE KIND

 

 

Qualifications Educated to Degree, in a computer related subject or equivalent experience.

Essential - Candidates must hold at least one of the following certifications: Microsoft Security, Compliance, and Identity Fundamentals (SC-900) Microsoft Certified: Security Operations Analyst Associate (SC-200) Microsoft Certified: Identity and Access Administrator (SC-300) Information Protection Administrator Associate (SC-400) Microsoft Cloud and AI Security Engineer (SC-500) Microsoft Certified: Cybersecurity Architect Expert (SC-100)

Desirable - Candidates must hold at least one of the following: Certified Information Systems Security Professional (CISSP), or Certified Information Security Manager (CISM) Certified Cloud Security Professional (CCSP) ISO 27001 Lead Implementer or Lead Auditor

Personal Skills & Behaviours Continued

BE BOLD

BE FAIR

BE KIND

 

 

If you like what you’ve read so far, it’s time to prepare your application.

Your application is used to determine whether you’ll be chosen to attend an interview and will act as a basis for the questions we’ll ask you on the day. The assessment will be based on the details in the role profile above.

It is important that you capture all the information outlined in the role profile and apply your skills and experience to the responsibilities and skills required. This will help us get a good feel for who you are and why you are a great match for us.

Do you like what you see?

Some tips:

Please list any formal qualifications on your form that are specified in the role profile. We will need to see the certificates for your qualifications at interview stage.

At least one of your referees should be your current employer. If you are not currently employed, simply provide your most recent employer.

If you don’t have any employment history, think about one professional and one personal referee who would best describe your suitability for the role.

Some of our roles require a Disclosing Barring Service (DBS) check. In relation to any cautions and convictions you may have, it is important to know what and when you are required to disclose.

The job details will highlight whether you are applying for a position which is exempt under the Rehabilitation of Offenders Act 1974 (Exemptions Order 1975). In most cases, these will be roles that are subject to an Enhanced Disclosure check. You should also refer to our recruitment of ex-offenders statement on our website for further information.

Make sure you include any paid work, unpaid work and any work experience in your employment history.

Start with your current employment, or if you are currently unemployed, your most recent employment. If there are any gaps in your employment, please tell us why.

 

 

4. Your interview

A chance to discuss the role further, see if you are the right fit for us and the role, and of course if we are a fit for you.

We may also ask you to complete a test, this is dependent on the vacancy.

1. Submit your application

This is where you tailor your application to meet the needs of the role, capturing your skills and experiences to give us the best version of yourself.

This will help us assess your suitability of the role.

2. The hiring manager will review your application and get in touch within 2 weeks of the job closing.

You will be contacted by email to arrange your interview.

You will be able to pick a time slot that suits you best.

3. Get yourself ready to meet with us!

Do your homework, we are impressed by candidates who go the extra mile!

Make sure you re-read the role profile and share examples to best match what we are looking for.

5. Great news!

We will be in touch to confirm the outcome and next steps.

What happens next?

If there are any adjustments you require to support you during this process, please ensure email us and inform us of what you need. We will do everything we can to help you and accommodate your request.

 

 

If you don’t feel you are the right fit for this particular role, but would like to be part of our organisation, we would love to hear from you.

[email protected]

0300 777 0000

Good luck with your application!