A major utilities organisation is seeking an experienced Security Operations Engineer.

Secure the organisation from external adversaries, lead security projects and uplifts and own the regular security hardening activities.

Requires a strong background across Cyber SecOps and Network Security!

Hybrid role!

Key Responsibilities

Security Operations & Continuous Improvement

• Assess and enhance security controls across IT and OT environments to protect against emerging cyber threats.
• Drive continuous improvement initiatives to strengthen security operations and reduce organisational risk.
• Manage and optimise security technologies including SIEM, firewalls, load balancers, web proxies, VPNs, and vulnerability management platforms.

Operational Support & Service Delivery

• Provide Level 2 and Level 3 support for security incidents, problems, and changes in line with service level agreements.
• Ensure effective integration of security platforms within the broader technology environment.

Technical Engineering Leadership

• Configure, maintain, and optimise security technologies such as SIEM, EDR, firewalls, load balancers, web application firewalls, and segmentation controls.
• Strengthen enterprise-wide vulnerability management capabilities and remediate vulnerabilities once detected
• Apply expertise in Secure Access Service Edge (SASE), including Security Service Edge (SSE) and SD-WAN technologies.
• Develop, implement, and enforce security policies and standards to protect network traffic and organisational data.

Incident Response

• Lead and coordinate the response to high-priority security incidents.
• Represent Security Operations in incident management and response forums.
• Analyse significant security events and coordinate investigations with threat hunting and cyber defence teams.
• Provide expert recommendations for remediation and risk reduction

Skills & Experience

• Minimum 5 years' experience in Security Operations or Cyber Security Engineering.
• Strong hands-on experience with:
  • SIEM or SOAR technologies
  • Network and perimeter security technologies
  • Firewalls (e.g. Palo Alto, Check Point)
  • VMware NSX Firewall
  • Load balancing technologies (e.g. AVI)
  • Secure Web Gateways and proxy solutions
  • SSE and SD-WAN technologies
  • Web Application Firewalls (e.g. Azure WAF)
  • Vulnerability management platforms
• Experience supporting incident response in complex enterprise environments.
• Understanding of ISO 27001 controls and security governance frameworks.
• OT experience is beneficial but not essential