Cyber Security Engineer – Cloud Security, SIEM & Incident Response

About the role

Join a fast‑growing technology company in Oxfordshire as a Cyber Security Engineer. Working on a hybrid basis, you will partner with the CIO and development teams to raise the cyber‑resilience of cloud platforms, applications and business systems.

Key responsibilities

• Design, implement and maintain cloud security controls across AWS, Azure or GCP.
• Configure and manage SIEM, EDR/XDR and other security monitoring tools.
• Lead vulnerability management, remediation and patching activities.
• Investigate and respond to security incidents, performing root‑cause analysis.
• Support secure software development practices, including application security testing and OWASP guidelines.
• Collaborate on Identity & Access Management (IAM) policies and network security architecture (firewalls, IDS/IPS, WAF, VPNs).

Required profile

• Proven hands‑on experience in cyber security engineering or security operations.
• Strong background in cloud security (AWS, Azure, or GCP).
• Experience with SIEM, EDR/XDR and security monitoring technologies.
• Solid knowledge of vulnerability management and incident response processes.
• Understanding of network security components such as firewalls, IDS/IPS, WAF and VPNs.
• Familiarity with secure software development, application security and OWASP principles.
• Experience with IAM solutions and security frameworks (ISO27001, NIST, NIS2).
• Exposure to regulated environments and frameworks like DORA or CMMC is a plus.

Required skills

• AWS
• Azure
• GCP
• SIEM
• EDR
• XDR
• Security monitoring
• Vulnerability management
• Incident response
• Firewalls
• IDS/IPS
• WAF
• VPN
• Secure software development
• Application security
• OWASP
• Identity & Access Management (IAM)
• ISO27001
• NIST
• NIS2
• DORA (optional)
• CMMC (optional)