Cyber Security Engineer
First Central29 days ago
Manchester, United Kingdom or Haywards Heath, United KingdomMid Level
Responsibilities
- Engineer, configure, maintain and improve cyber security controls across the Microsoft security estate.
- Develop and maintain security telemetry, data connectors, alerting integrations, workbooks and monitoring coverage across cloud, identity, endpoint, email, applications and agentic services.
- Build, test and maintain security automation, orchestration, SOAR playbooks and approved automated containment workflows.
- Implement security policies, baselines, guardrails, runtime controls and AI defence capabilities for Azure workloads, cloud services, identities, AI agents and connected tools.
- Translate threat intelligence, incident learning and detection requirements into technical controls and monitoring capabilities with Cyber and the SOC.
- Integrate security controls into DevOps and value-stream delivery practices, including automated control checks.
- Monitor tooling health, coverage, effectiveness and lifecycle while identifying control gaps, technical debt and automation opportunities.
- Support cyber incident investigations, threat hunting, control validation, recovery activities and remediation of security weaknesses.
- Review third-party platforms and integrations against security best practice and maintain security documentation, standards, procedures and evidence.
- Assess proposed changes to security tooling and controls, contribute to cyber metrics and reporting, and ensure compliance with policies, standards and regulations.
Requirements
- Practical experience in cyber security engineering, security platform engineering or a closely related technical security role.
- Hands-on experience with Microsoft Defender XDR, Microsoft Purview, Microsoft Sentinel, Microsoft Defender for Cloud and Entra security capabilities.
- Relevant technical security qualification or equivalent practical experience, such as AZ-500, SC-200, SC-300, SC-100, CISSP or similar.
- Experience implementing security telemetry, integrations, automation and response workflows.
- Knowledge of cloud security controls and Azure security concepts, identity security, workload identities, privileged access, Conditional Access and non-human or agent identity risks.
- Experience supporting detection engineering, incident response, vulnerability or exposure management and control validation.
- Ability to automate security activities using scripting, APIs, workflow tools or infrastructure-as-code approaches.
- Understanding of DevOps, CI/CD, secure delivery practices, Agile value-stream environments, and frameworks including ISO27001, NIST and PCI-DSS.
- Experience with Security Copilot and other AI defence capabilities is highly desirable.
- Strong technical troubleshooting, analytical, communication, stakeholder-management, organisational and prioritisation skills.
Benefits
- Predominantly home-based flexible hybrid working with one day per week in the office.
- Office locations include Salford Quays in Manchester, Haywards Heath in West Sussex or Guernsey, with additional office attendance welcome.
About First Central
1st Central is a UK personal-lines insurer that underwrites and sells motor and home insurance to consumers. It operates a proprietary technology and data platform for pricing, underwriting, fraud prevention, and claims, serving over 1.4 million policyholders. Founded in 2008, the company is privately held and headquartered in Haywards Heath, England, with teams across multiple UK locations.