Cyber Security Engineer
Role Profile
Cyber Security Engineer
Contract Type: Permanent
Closing Date: 12th October 2026
(Apply early as this role may close sooner if demand is high and we have enough suitable candidates.)
Role profile Job title: Cyber Security Engineer
Hours: 35 hours a week
Salary: £53,966
Role Purpose
Location (s): Ty Gwyn and hybrid working (role specific)
Reporting to the Infrastructure Manager. The Cyber Security Engineer is responsible for designing, implementing, monitoring and continually improving the organisation's cyber security capabilities across Microsoft Azure and the wider Microsoft security stack.
The role will act as the technical lead for cyber security, ensuring that cloud platforms, identities, devices, networks, applications and data are protected against evolving threats. The postholder will provide expert guidance on security architecture, incident response, governance, risk management and compliance, ensuring security remains aligned with business objectives and regulatory requirements.
The role combines strategic security leadership with hands-on engineering and operational responsibilities. Working with internal and external stakeholders, you will evaluate and challenge existing processes and potential innovative digital platforms to ensure that every technology investment delivers measurable value for our customers, colleagues and the organisation.
Key Accountabilities and Responsibilities
Security Architecture & Engineering
Design, implement and maintain secure cloud architectures within Microsoft Azure. Lead the development and implementation of Zero Trust security principles across the organisation. Develop and maintain security baselines, standards and technical controls. Ensure security is embedded into all solution designs, projects and technology change initiatives. Provide security design assurance and technical approval for new systems and services.
Identity & Access Management
Lead the management of Microsoft Entra ID, Conditional Access, Privileged Identity Management (PIM) and Role- Based Access Control (RBAC). Implement and monitor least-privilege access models. Develop access governance, certification and privileged access processes. Manage identity protection controls and support secure authentication strategies.
Key Accountabilities and Responsibilities continued. Security Operations
Act as technical lead for cyber security incidents. Monitor, investigate and respond to security alerts and threats. Lead incident containment, eradication and recovery activities. Conduct root cause analysis and implement preventative measures. Work closely with third-party SOC, MDR and security partners where applicable.
Microsoft Security Stack Management
Administer and optimise: Microsoft Defender XDR, Defender for Endpoint, Defender for Cloud, Defender for Identity, Defender for Office 365, Microsoft Sentinel, Microsoft Purview, Azure Key Vault, Azure Firewall, Network Security Groups. Develop automated security monitoring, alerting and response capabilities in conjunction with our SOC/SIEM partner.
Governance, Risk & Compliance Support compliance with ISO 27001, 9001, ,Cyber Essentials Plus, UK GDPR, NIST Cyber Security Framework Relevant housing sector regulations Conduct security risk assessments and provide remediation recommendations. Maintain security policies, standards and procedures. Support internal and external audits.
Key Accountabilities and Responsibilities continued. Vulnerability & Threat Management
Lead vulnerability management activities across cloud, endpoint, server and application estates. Implement remediation plans and track risk reduction. Conduct threat hunting activities using Microsoft security tooling. Analyse threat intelligence and recommend appropriate controls.
Business Continuity & Resilience
Support cyber incident response, disaster recovery and business continuity planning. Participate in tabletop exercises and resilience testing activities. Ensure…