Job Search

Cyber Security Engineer

Secure by Design & Security Platforms

6-Month Contract | Inside IR35 | London 1-2 Days Per Week

We're seeking a hands-on Cyber Security Engineer to embed Secure by Design principles across technology programmes while helping improve and optimise a suite of enterprise security platforms.

This is an excellent opportunity for a security professional who enjoys working across architecture, engineering and delivery teams, influencing projects from inception through to deployment while providing practical, pragmatic security guidance.

Key Experience

✅ Secure by Design & Security Assurance
✅ Security Architecture & Design Reviews
✅ Threat Modelling & Risk Identification
✅ Microsoft Security Stack (Identity, Endpoint, Cloud & Monitoring)
✅ Security Platform Configuration & Support
✅ Security Standards, Controls & Governance
✅ Vendor & Security Tool Management
✅ Stakeholder Engagement Across Engineering & Delivery Teams

What You'll Be Doing

Embed security into projects and programmes from day oneConduct security design reviews and lightweight threat modellingDrive security assurance throughout the delivery lifecycleEnhance configuration, adoption and effectiveness of security platformsSupport onboarding and implementation of new security toolingAct as a key liaison between Security, Architecture, Engineering and Delivery teamsDevelop practical standards, templates and guidance to improve secure-by-design outcomesManage platform-related requests, vendor engagement and continuous improvement initiatives

Ideal Background

Strong experience delivering Secure by Design outcomes within complex enterprise environmentsExperience reviewing solution architectures and identifying pragmatic security controlsHands-on experience with Microsoft security technologiesExposure to cloud, infrastructure, applications and integration securityExperience supporting or administering security tooling and platformsAbility to operate independently and quickly add value in a fast-paced environment

Desirable

Security Architecture or Engineering backgroundIAM technologies such as One Identity, Delinea or StrongDMExperience within regulated, utilities, energy or critical infrastructure environments

A great opportunity for a delivery-focused security contractor to influence major technology initiatives, improve security engineering practices and help drive a Secure by Design culture across a large and complex organisation.

GCS is acting as an Employment Business in relation to this vacancy.

Read less

Cyber Security Engineer - Microsoft 365 & Azure

6-Month Contract | Outside IR35 | £350-400 per day | Remote (UK) | 1-2 Days per Month On-Site (South West London)

A leading public sector organisation is looking for a Cyber Security Engineer to support a major cyber security improvement programme.

Working alongside the Cyber Security, Infrastructure and Platform teams, you'll help deliver a range of security enhancements across Microsoft 365, Azure and AWS, strengthening the organisation's overall security posture while improving identity, endpoint, cloud and data protection capabilities.

This is a fantastic opportunity for someone who enjoys hands-on engineering and wants to be involved in delivering meaningful security improvements across a large enterprise environment.

Key ResponsibilitiesDeliver security improvement projects across Microsoft 365, Azure and AWS.Implement and enhance security controls across identity, endpoint, cloud and data protection.Configure and support Microsoft Intune, Microsoft Defender, Microsoft Purview and related Microsoft security technologies.Assist with SIEM configuration, alert tuning and security monitoring.Support Identity & Access Management improvements, including MFA, Conditional Access and Microsoft Entra ID.Work closely with Infrastructure, Platform and Service Desk teams to plan and implement security changes.Assist with vulnerability management and endpoint security improvements.Support cloud security initiatives across Azure and AWS.Produce clear technical documentation and operational handover documentation.Work collaboratively with internal technical teams to ensure successful delivery of security initiatives.Essential Experience

We're looking for someone with experience across several of the following areas:

Experience working as a Cyber Security Engineer within an enterprise environment.Good knowledge of Microsoft 365 and Azure security.Experience with Microsoft Intune and Microsoft Defender.Understanding of Identity & Access Management, including Microsoft Entra ID, MFA and Conditional Access.Experience supporting or configuring SIEM platforms (Microsoft Sentinel or similar).Knowledge of endpoint security and vulnerability management.Experience working within Azure and/or AWS environments.Basic PowerShell scripting skills.Experience delivering technical projects and working with multiple technology teams.Strong communication skills with the ability to produce clear technical documentation.Desirable Experience

Experience in any of the following would be beneficial but is not essential:

Microsoft Purview, DLP or Information Protection.Zscaler (ZIA/ZPA).AWS Security.Infrastructure-as-Code (Terraform, Bicep or ARM Templates).Experience within the UK Public Sector or another regulated environment.Knowledge of UK GDPR, PSN or PCI DSS.Contract DetailsRole: Cyber Security Engineer - Microsoft 365 & AzureContract: 6 MonthsDay Rate: £350-400 per dayIR35 Status: Outside IR35Location: Remote (UK)Travel: 1-2 days per month on-site in South West LondonStart Date: ASAP

This is an excellent opportunity to join a high-profile cyber security programme, working on modern Microsoft security technologies within a collaborative team while enjoying the flexibility of a predominantly remote contract.

GCS is acting as an Employment Business in relation to this vacancy.

Read less

As a Senior Cyber Security Engineer, you will play a critical role in delivering cyber strategies, with responsibility for the design, implementation, and ongoing effectiveness of security capabilities across IT and OT environments.

You will engineer and maintain the technical capabilities that enable early threat detection, rapid and consistent response, and sustained cyber risk reduction, while translating cyber risk, regulatory, and business demands into practical, measurable, and operationally sustainable security controls.

This is a hands‑on engineering role for individuals who enjoy building resilient security capabilities, integrating platforms and telemetry, and turning strategy, risk, and incident learnings into practical engineering outcomes. The role requires a strong understanding of security engineering concepts, infrastructure technologies, and best practices, along with the ability to collaborate effectively across IT, OT, and security operations to drive continuous improvement.

You must be able to obtain Counter Terrorist Check (CTC) Clearance to be eligible for this position.

What you'll be doing as a Senior Cyber Security Engineer

Collaborate with stakeholders to design, implement and maintain security controls to meet business, compliance, and risk mitigation requirements; ensuring controls are effective, measurable, and operationally sustainable.Implement and maintain detection and response capabilities through SIEM integration with security controls and IT systems, with a focus on reducing time‑to‑detect and time‑to‑remediate through improved pre‑incident engineering.Participation in a 24x7 on‑call support rota, responding to SIEM health alerts and restoring log ingestion where required.Manage use cases, perform data enrichment, and define standardised and automated containment workflows.Develop and manage operational procedures and reporting methodology.Manage and oversee security technology platforms (e.g. SIEM, SOAR, EDR, and email security).Monitor ongoing control performance and coordinate remediation where gaps are found.Automate operation procedures and reporting processes and integrate outputs into risk reporting frameworks.Liaise with IT and OT teams to ensure controls are implemented according to agreed baselines.Align control design with industry standards, regulations, and best practices. (e.g. NIS, ISO27001, GDPR).Support audits, reviews, and assessments of security controls.Identify and implement improvements to control coverage and resilience.Proactively advise on technology, best practices, and delivery models.

What you should bring to the role

Experience in Security Engineering, with a focus on detection & response engineering in an enterprise environment.Strong understanding of both IT and OT systems and infrastructure.Experience in identifying and remediating cyber risks in evolving digital environments.Familiarity with SIEM, EDR, email security and identity and access management technologies (e.g. Entra ID, CyberArk).Familiarity with a range of operating systems and security considerations across SaaS, IaaS, end-user computing, and server estate.Sound knowledge of cloud and network security technologies.Strong analytical, planning, and organisational skills.Ability to communicate technical issues clearly to non-technical stakeholders.Degree in Cyber Security, Computer Science, Information Technology, Engineering, or a related field.Industry certification(s) such as CISSP, CCSP, CompTIA Security+, or SC-200.

It would be great if you also had

Previous experience working in a large, complex infrastructure-based or water utility organisation.Experience in systems or network administration in IT and/or OT environments.Experience leading or mentoring others in delivering cybersecurity outcomes.Security engineering vendor or product certifications such as Microsoft Certified: Azure Security Engineer Associate, Tenable, or CyberArk.

GCS is acting as an Employment Agency in relation to this vacancy.

Read less