Cyber Security Engineer

Job description

At 1st Central, everything starts with our people. As one of the UK’s leading motor and home insurers, we use smart technology, data and great service to make insurance fast, fair and simple for over 1.4 million customers. We’re proud to create an environment where people feel supported, trusted and able to grow - whether that’s developing new skills, taking on fresh challenges or making a real impact every day. If you’re looking for a role where you can make a difference, we’d love to hear from you. We’re looking for a Cyber Security Engineer to join our Cyber and Information Security team, this technically focused role is responsible for implementing, maintaining and improving specialist cyber security controls, tooling, telemetry and automation across the organisation. Working closely with teams across Technology & Data you’ll ensure that security controls are designed in line with best practice and are effective, scalable and aligned to business and regulatory requirements. We’re big on flexible hybrid working . This role is predominantly home-based, with just one day a week in the office in either Salford Quays (Manchester), Haywards Heath (West Sussex) or Guernsey . Of course, if you’d like to spend more time working alongside the team, you’re always welcome to come into the office more frequently. Core skills we’re looking for to succeed in the role: Cyber Security Engineering: Practical experience in cyber security engineering, security platform engineering, or a closely related technical security role. Microsoft Security Technologies: Hands-on experience with Microsoft security technologies, including Defender XDR, Purview, Sentinel, Defender for Cloud, and Entra security capabilities. Technical Security Expertise: A relevant technical security qualification or equivalent practical experience, such as AZ-500, SC-200, SC-300, SC-100, CISSP, or similar. Troubleshooting & Analysis: Strong technical troubleshooting and analytical skills, with the ability to investigate and resolve security-related issues. Communication & Stakeholder Management: Excellent communication and stakeholder management skills, with the ability to explain technical security matters clearly to different audiences. Organisation & Prioritisation: Good organisational skills, with the ability to manage and prioritise engineering activity across multiple stakeholders. What’s involved: You’ll engineer, configure and maintain cyber security controls across the Microsoft security estate, including Microsoft Defender XDR, Microsoft Sentinel, Microsoft Defender for Cloud, Entra, Microsoft Purview and associated integrations. You’ll develop and maintain security telemetry, data connectors, alerting integrations, workbooks and technical monitoring coverage across cloud, identity, endpoint, email, applications and agentic services. You’ll build, test and maintain security automation, orchestration and response workflows, including SOAR playbooks and approved automated containment actions. You’ll implement and maintain technical security policies, baselines and guardrails defined by Information Security, Cyber and Architecture. You’ll work with Cyber and the SOC to translate threat intelligence, incident learning and detection requirements into effective technical controls and monitoring capabilities. You’ll support the engineering and continuous improvement of security controls for end users, Azure workloads, cloud services, identities, workloads and non-human or agent identities. You’ll integrate security controls into DevOps and value-stream delivery practices, including relevant security tooling, telemetry and automated control checks. You’ll contribute to the implementation of runtime controls, monitoring, containment and security guardrails for AI agents, autonomous workflows and connected tools. You’ll contribute to the implementation and maintenance of AI defence capabilities. You’ll monitor the health, coverage, effectiveness and lifecycle of cyber security tooling, identifying control gaps, technical debt and opportunities for rationalisation or automation. You’ll provide technical support to cyber incident investigations, threat hunting, control validation and recovery activities when required. You’ll remediate and/or work with Technology teams and value streams to support the remediation of security weaknesses and confirm that corrective controls have been implemented effectively. You’ll undertake Cyber control reviews of 3rd party platforms and integrations against best practice. You’ll maintain technical documentation, configuration standards, operating procedures and evidence relating to security platforms and controls. You’ll assess proposed technical changes to security tooling and controls, identifying risks, dependencies and implementation requirements. You’ll contribute to cyber metrics and reporting, including control coverage, platform health, automation effectiveness and remediation progress. You’ll ensure compliance with company policies, security standards and relevant regulatory requirements at all times. You’ll comply with the requirements, and act in accordance with, the Group Code of Conduct and Fitness and Propriety policies at all times Experience & knowledge Practical experience in cyber security engineering, security platform engineering or a closely related technical security role. Hands-on experience with Microsoft security technologies, such as Defender XDR, Purview, Sentinel, Defender for Cloud, Entra security capabilities Experience with Security Copilot and other AI defence capabilities highly desirable. Experience implementing and maintaining security telemetry, integrations, automation and response workflows. Knowledge of cloud security controls and Azure security concepts, while working effectively with separate cloud platform and operations teams. Understanding of identity security, workload identities, privileged access, Conditional Access and non-human or agent identity risks. Experience supporting detection engineering, incident response, vulnerability or exposure management and control validation. Understanding of DevOps, CI/CD and secure delivery practices in an Agile, value-stream environment. Understanding of security frameworks, such as ISO27001, NIST and PCI-DSS. Skills and Qualifications Relevant technical security qualification or equivalent experience, for example AZ-500, SC-200, SC-300, SC-100, CISSP or similar. Strong technical troubleshooting and analytical skills. Ability to automate security activities using scripting, APIs, workflow tools or infrastructure-as-code approaches. Excellent communication and stakeholder management skills, with the ability to explain technical security matters clearly. Good organisational skills and the ability to manage engineering priorities across multiple stakeholders. Behaviours Demonstrates an engineering mindset focused on reliable, repeatable and measurable security outcomes. Works collaboratively with teams including Cyber, Technology, Architecture and value-stream maintaining clear accountability boundaries. Willingness to continually develop knowledge of Microsoft security, cloud, automation and agentic security capabilities. Self-motivated and proactive, with a strong focus on delivery and continuous improvement. A pragmatic and risk-based approach to implementing security controls. Emphasis on attention to detail, technical accuracy and secure change management. Strives to improve control effectiveness, resilience and business outcomes. Ready to engineer better security? Bring your expertise, ideas and drive for continuous improvement and help us strengthen our cyber defences . Ready to join us? We’re looking for talented people who want to make a real impact for our customers, colleagues and business. Apply today and discover where a career at 1st Central could take you. To find out more about careers at 1st Central, take a look here