Cyber Security Engineer

Location: Manchester, United Kingdom. Eligibility to work in the United Kingdom is required, along with any role-specific screening or access requirements.

Company

Operating in the energy, utilities, and waste sector, the organisation supports critical services and infrastructure through resilient technology, dependable data, and disciplined risk management.

What you will do

• Engineer, administer, and improve the Elastic SIEM platform and related security tooling.
• Develop detection logic, dashboards, alert workflows, and monitoring use cases.
• Design and maintain pipelines for log collection, parsing, transformation, normalisation, and integration.
• Strengthen preventative and detective controls across AWS, Azure, and operational technology environments.
• Support SOC and NOC teams with investigation, triage, technical escalation, and incident response.
• Improve telemetry quality, troubleshoot monitoring defects, maintain documentation, and automate repetitive security engineering activities.

Requirements

• Experience in cyber security engineering, security operations, detection engineering, or a related technical discipline.
• Practical experience administering or developing SIEM capabilities; Elastic knowledge is strongly advantageous.
• Understanding of security telemetry architecture, including collection, ingestion, parsing, enrichment, and retention.
• Experience creating or tuning detection rules, correlation logic, dashboards, alerts, or investigative workflows.
• Working knowledge of AWS and Azure security principles, incident investigation, threat analysis, and response improvement.
• Eligibility to work in the United Kingdom and willingness to meet role-specific screening or access requirements.

Nice to have

• Relevant professional certifications or equivalent practical experience in cyber security, cloud, or infrastructure.
• Experience with Data Loss Prevention, security operations centres, managed security service providers, cloud platforms, infrastructure teams, or regulated environments.

Culture & Benefits

• Work on cyber security challenges supporting the resilience of essential energy, utilities, and waste services.
• Gain broad exposure to SIEM engineering, cloud security, operational technology, and security operations.
• Influence the development of detection, monitoring, and response capabilities.
• Collaborate with specialists across security architecture, governance, cloud, infrastructure, and operations.
• Build a measurable portfolio of improvements in monitoring quality, threat detection, and risk reduction.
• Develop transferable experience in a regulated sector where resilience and security assurance have immediate operational importance.