Senior Security Engineer

Join NCC Group, a global leader in cyber security and risk mitigation. As a Senior Security Engineer, you will play a critical role in supporting our internal business functions and external customer commitments. You will be responsible for implementing, monitoring, and maintaining security tools and technologies to ensure the confidentiality, integrity, and availability of our information systems and assets. This is an excellent opportunity to make a significant impact on our cyber security posture and contribute to the overall success of the organization.

• Implementing, monitoring, and maintaining security tools, technologies, and configurations to ensure the confidentiality, integrity, and availability of Group information systems and assets.
• Assisting with and providing technical subject matter expertise into the design of security solutions, working in conjunction with IT Operations and Architecture colleagues.
• Taking part in the investigation of security alerts and incidents, in conjunction with the Security Operations Centre and Digital Forensics colleagues.
• Microsoft Sentinel
• Ability to take direction but also take ownership on both Project and BAU work
• Microsoft EntraID/Azure
• Any Security related certifications may be advantageous – Security+, Microsoft SC900, AZ900
• Excellent communication skills and the ability to explain security concepts to management and other stakeholders both technical and non-technical, who may not have a security background
• Knowledge and experience of these technologies is a key requirement:
• VMWare
• Prior experience in an IT security role, or a comparable function, is essential
• Willing to travel to NCC office locations globally and stay away from home on occasion
• Ability to work proactively in identifying security issues then working to define and deliver appropriate mitigations
• Knowledge and experience of hybrid cloud environments with a particular emphasis on EntraID/M365
• Excellent analytical and problem solving skills
• Ability to quickly understand the technical detail of new or unfamiliar technologies is essential
• Microsoft Active Directory
• Microsoft Intune
• Microsoft Defender 365 (including Microsoft Defender XDR)
• Security Frameworks (NIST, CIS etc.)
• Experience in as many of these technologies/areas as possible is highly desirable:
• PAM Tools and Technologies
• AWS
• Endpoint Security (including mobile devices, Windows and Linux)
• Security Incident Response