UK remote
Cybersecurity Engineer
About this role
Overview The Cybersecurity Engineer is a hands-on technical role within the Cybersecurity team, responsible for the day-to-day operation, monitoring and continuous improvement of the security controls that protect Cambridge Consultants’ systems, data and client work. As a small team, everyone contributes across the full breadth of the estate rather than owning a single system in isolation. Reporting to the Head of Cybersecurity, you’ll work across a wide range of security systems and tooling alongside the rest of the Cybersecurity team, while collaborating with colleagues across IT Services and other business stakeholders to keep the organisation secure.
Strong teamwork and a willingness to build knowledge beyond your immediate specialism are essential, given the breadth of technologies and responsibilities covered by the team. What you’ll be doing: Monitor and operate the team’s core security tooling, investigating alerts and coordinating remediation activities. Manage vulnerability assessment activities, including vulnerability scanning, remediation tracking and maintenance of the risk register.
Support the operation of email security controls, including investigation and triage of suspicious email activity. Review software requests, approving low-risk solutions and conducting more detailed security assessments where required, working with stakeholders across the business to understand requirements and risks. Contribute to the continuous improvement of security monitoring, processes and operational practices.
Support the administration and improvement of identity, access management and endpoint security controls, including Active Directory, Entra ID, Conditional Access and endpoint management technologies. Help deliver cybersecurity awareness activities, provide practical security guidance, and work with colleagues across IT and the business to support secure ways of working. Contribute to security improvement initiatives and projects across cloud security, identity, monitoring and data protection technologies, informed by emerging threats and technology risks What you need to succeed: Experience investigating and triaging alerts from AV/EDR tooling (e.g.