We are looking for an ambitious Security Engineer to join an interesting client based near Camberley, role is hybrid.
Provide support to the IT Manager in terms of developing and managing our cybersecurity strategy, particularly in our Microsoft-centric environment. Managing our security infrastructure, primary liaison with our external SOC and ensuring our compliance with external standards and regulations.
Security:
? Develop, maintain, and execute a comprehensive Security Roadmap
? Liaise with our external SOC provider to mitigate all security alerts and incidents.
? Collaborate with external providers to enhance security posture.
? Manage and optimise Microsoft 365 and Intune environments to strengthen estate posture.
? Implement recommendations from security audits and assessments.
Microsoft Operations & Licensing:
? Devise and implement a strategy to maximise our E3 applications to support the Security Roadmap.
? Stay updated on the latest Microsoft security features and best practices.
Project Management:
? Manage, assess, and report on security project activities to meet defined deadlines.
? Communicate effectively with stakeholders and users regarding project progress, security initiatives and the security posture
IT Team development:
? Provide training and mentorship to the wider IT team on security best practices and business-critical functions.
? Proactively contribute to the continuous improvement of the IT team's capabilities in supporting security objectives.
? Proactively contribute towards improving the IT team.
Minimum of 2 years relevant work experience
Knowledge and practical experience in managing Meraki firewalls, VPNs, Microsoft Suite (Incl. Defender, InTune), Mail Filtering, and other security products
Proficient in network troubleshooting
Understanding of the Microsoft ecosystem including, but not limited to, licensing requirements, Identity Access Management, User Risk Policies, Conditional Access Policies, App Registrations, and Intune
Practical experience with vulnerability assessment and management using Microsoft Defender or other tools
Experience in designing and managing mission-critical infrastructure is preferred
Experience with implementing Zero Trust and Defense In Depth practices in a variety of environments
Familiarity with Linux and Windows environments is preferred.
Familiarity with Risk Assessments, Disaster Recovery, Business Continuity and Incident Response
Knowledge of ISO27001, Cyber Essentials (CE), and Cyber Essentials Plus (CE+)
Strong communication, organizational, problem-solving, and presentation skills.
Self-motivated, capable of working with minimal supervision over time with adequate support.
Ability to build trusting, collaborative relationships with peers while maintaining a strong sense of accountability and ownership.
Desirable:
Fault logging systems
Familiarity with SQL Database management
Experience with Security Information Event Management (SIEM) tools
Awareness of CIS Benchmarks for Windows Endpoints and Servers
Experience of 1st and 2nd line helpdesk support, including Systems support
Mayflower is acting as an Employment Agency in relation to this vacancy