Cyber Security Engineering Team Leader

Are you from a technical cyber security background and looking to join a growing team where your expertise will help keep our business secure? If so, we have a great opportunity for you to join our team as a Cyber Security Engineering Team Leader.

This role is a minimum of two days a week at our head office in Claverton, Bath.

As a Cyber Security Engineering Team Leader, you will lead the Cyber Security Engineering team to design, implement and maintain a secure posture and baseline across all components of the YTL UK Group On-Premises and Cloud Technology environments, employing recognised security engineering practices and supporting secure build processes.

It is essential to have expertise in Azure and On premise Active Directory.

Responsibilities will include:

• leading the Security Engineering team
• delivering secure build standards and profiles
• security Automation & Engineering
• developing and maintaining a secure Cloud Security baseline
• managing and maintaining security tools and sensors
• guiding and supporting secure network architecture
• supporting Cyber Incident Response
• supporting operational planning, reporting and compliance.

You will engage in a broad range of security technologies and capabilities, including design and implementation of cloud security engineering, identity and access management services (IdAM / PAM / PIM), authentication protocols, on-premise AD and Entra , PKI, SIEM tooling, and other security tooling.

The candidate will provide advice and guidance to colleagues across the Technology Directorate and the enterprise, and will mentor less experienced team members.

A willingness to join an Out of Hours rota is also required.

For this role, we are looking for someone with drive, flexibility and the motivation to work independently while maintaining their own workload to set deadlines. You will be a critical thinker with good problem-solving skills, as well as excellent customer service and communication skills.

In addition, we are looking for:

• at least one of the following or equivalent Industry qualifications, Microsoft AZ-500, Microsoft SC-900, Microsoft Cybersecurity Architect (SC‑100), GIAC Cloud Security Essentials (GCLD) or GIAC Security Engineering (GSEC), ISC2 CCSP (Cloud Security)
• excellent and demonstrable knowledge of security engineering standards, practices and procedures
• excellent and demonstrable hands-on experience deploying and configuring a wide array of common security technologies and tools
• experience working on or leading projects to deliver new security solutions
• strong understanding of important security concepts and security best practices
• strong experience working with and securing cloud services such as Azure
• strong hands-on experience with Azure cloud security
• experience securing on premise infrastructure
• experience and knowledge of identity and access management
• strong written communication skills, with experience in documenting policies, procedures, security requirements and reporting, including to senior management
• strong verbal communication, with the ability to clearly explain security requirements and important security concepts
• the ability to collaborate with multiple teams at different technical levels
• strong knowledge of security protocols, technologies and best practices
• security analysis experience to include incident classification, investigation and remediation
• knowledge of common cyber security threats and application of countermeasures
• good knowledge of Tactics, Techniques and Procedures (TTP), e.g., MITRE Att&ck Framework
• superior knowledge of Cloud security principles, techniques and technologies
• excellent knowledge and experience with Microsoft Windows (desktop and server), Unix and Linux operating systems
• understanding of Zero Trust principles and their practical implementation.

• A combined pension contribution of up to 20%.
• Career progression and professional development opportunities.
• 25 days' holiday rising to 28 with length of service.
• The opportunity to sell up to five days of holiday every year.
• The opportunity to buy up to ten days of holiday each year (subject to conditions).
• A healthcare package that allows…