Cyber Security Engineer - Threat Advisor

Our client is an exciting, scaling company that provides a wide range of proactive Cyber Security solutions, they love the hunt and proactively keep their clients safe by spotting threats, improving security and making a real difference to their clients, from their platform through to Bug sweeps.

You will have 3+ years experience working within Cyber Security, with strong M365 Security, AWS Security and solid Vulnerability management (Qualys)

Ideally you will have a great understanding of:

• M365 Security
• AWS Security principles and configurations
• Vulnerability management (Qualys), network security and threat analysis.

• Microsoft 365 Security:
  Understanding of M365/Azure security architecture, identity controls, conditional access policies, privileged roles, email security, device posture, and tenant-wide exposure analysis
• AWS Security:
  Working knowledge of AWS security principles and configurations
• Vulnerability Management:
  Proficient in Qualys or similar vulnerability scanning tools with ability to interpret, prioritise, and contextualise findings
• Network Security:
  Solid understanding of firewall architectures, rule assessment, network segmentation, and how attackers abuse network trust
• Threat Analysis:
  Ability to identify attack paths, assess misconfiguration risks, and understand how small weaknesses combine into exploitable compromise chains

• Threat Hunting Mindset:
  Ability to think like an attacker and reason like a defender
• Critical Analysis:
  Assess intent, likelihood, and impact rather than relying solely on automated scores
• Investigation Skills:
  Treat alerts as investigations - validate issues, assess relevance, and determine appropriate escalation
• Security Tool Evaluation:
  Independently assess security tools for effectiveness, identify gaps, duplication, and misalignment

• Client Advisory:
  Act as trusted cyber advisor to both technical and non-technical stakeholders
• Clear Communication:
  Explain complex security risks in plain language without fear-mongering or jargon.
• Prioritisation Guidance:
  Help clients understand what to fix first and why, with clear reasoning and guidance.
• Stakeholder Management:
  Comfortable responding to questions, explaining findings, and guiding security decisions.