Cyber Security Engineer

Cardiff, South Glamorgan
Sanderson

Job Title: Cyber Security Engineer

Location: Cardiff – Hybrid Working 1 day per week in the office

Salary: £60,000 – £70,000 + benefits

Are you an experienced Cyber Security Engineer looking for your next challenge? If so, this could be the ideal opportunity for you. My client, a leading financial services business, and a household name with an excellent reputation, is currently investing heavily within their Cyber Security function and are looking for an experienced Cyber Security Engineer to join the team.

You will become a key member the cyber security function, reporting into the Head of Information Security working alongside other team members, you will work within the InfoSec team to engineer and support multiple environments to ensure that the systems and data always remain secure. They want to build a positive, inclusive, and sustainable security culture through continuous engagement and positive reinforcement of good security behaviours. InfoSec is part of the wider tech team who you will work with closely to design, implement, and manage security solutions. You will also work with the rest of the business to find the best solutions and achieve our security outcomes, protecting our customers and the organisation.

Key Responsibilities:

• Understanding complex technical issues and managing them within a fast-paced business environment.
• Championing best practice for application security and cloud infrastructure, supporting our engineering teams and being the subject matter expert.
• Automating security processes and procedures.
• Analysing logs, files and identifying malicious activity.
• Investigation, triage, and management of security incidents as part of the Security Incident Response Team.
• Evaluation and implementation of security products and services.
• Maintain and improve our vulnerability management program, while creating and assigning tickets to ensure that any potential threats are quickly addressed and mitigated.
• Identifying current and emerging technology issues including security trends, vulnerabilities and threats.

Skills and Experience Required:

• Proven experience of working within a similar Cyber Security Engineer position.
• A good understanding of Agile methodologies, particularly Scrum and Kanban.
• A good knowledge of public cloud technologies, ideally AWS but not essential.
• Strong skills in log analysis, SIEM and EDR solutions.
• Previous experience using infrastructure-as-code technologies including Terraform and CloudFormation.
• A good understanding of API’s, websites & Mobile Apps.
• Experience in programming in Python & JavaScript (desirable)
• Experience in incident response/SOC, in writing procedures and runbooks.
• Experience of selecting, implementing, and maintaining security products and services.
• Knowledge of common security weaknesses and associated mitigations.
• A genuine enthusiasm for identifying security problems and creating solutions to fix them.
• Experience of working in a DevOps, Security and/or software development role (desirable).

For more information or to apply please send a copy of your CV to