Cyber Security Engineer
Overview
As a Cyber Security Engineer you will design, implement and enhance security controls across cloud, hybrid and on‑prem environments to protect critical infrastructure and data. You will collaborate with engineering and security teams to embed security best practices and drive continuous improvement of security tooling and policies. The role involves hands‑on work in security monitoring, incident response and threat detection within diverse environments and SOC contexts. You will address emerging risks, including AI and cloud technologies, helping to strengthen resilience and compliance. This is an opportunity to shape security at scale in a global tech and professional services setting.
Responsibilities
- Design, implement and manage security tools, technologies and processes protecting infrastructure, applications and data
- Collaborate with engineering and security teams to embed security best practices across technology environments
- Develop automation to improve security operations (SIEM ingestion, routing, tooling)
- Support firewall and network security management across cloud, hybrid and on‑prem environments
- Develop, maintain and enhance security policies, standards and procedures
- Conduct infrastructure security assessments using recognised methodologies and tooling (e.g., CIS Benchmarks)
- Contribute to vulnerability management, endpoint security, IDS/IPS and monitoring capabilities
- Support security monitoring and incident response activities within SOC environments
- Apply security principles across cloud infrastructure, CI/CD pipelines, virtualised environments and IaC
- Identify and mitigate emerging security risks including AI and modern cloud tech
Key requirements
- Strong understanding of cyber security and platform engineering principles
- Networking and cloud security experience across modern environments
- Experience with CI/CD pipelines, virtualisation and Infrastructure as Code (IaC)
- Linux/WSL experience with scripting capability
- Practical experience with SIEM and log management platforms (e.g., Splunk, Microsoft Sentinel, Cribl, ELK)
- Experience with AWS, Azure and/or GCP
- Scripting or programming skills (Python, Bash, PowerShell)
- Knowledge of IDS/IPS, vulnerability management and endpoint security
- Experience with SOC environments
- Knowledge of AI security and AI hardening techniques
- IaC tools: Terraform, CloudFormation, Bicep
- Collaborative
- Analytical mindset
- Problem solving
- Splunk
- Microsoft Sentinel
- Cribl
Full job description from WhatJobs. Apply for this role →
Explore: Cyber Security Analyst jobs in the UK Engineering recruitment Specialist jobs in Cardiff