Focus Group

Cyber Security Engineer Level 2

Focus Group Adur, England, United Kingdom · £35K/yr

Technology, Information and Internet · 1,001-5,000 employees

Oct 20
security Mid (2-5 yrs) Other United Kingdom
Create a free account to apply — email only, no card. You can also save this posting or score it against your profile with AI.

About the role

The role involves deploying, configuring, and validating managed security platforms while acting as a Tier 2 escalation point for security incidents. You will perform root-cause analysis, maintain customer security environments, and collaborate with the SOC and engineering teams to resolve complex issues.

What they look for

Cyber security Bitdefender GravityZone RocketCyber SaaS Alerts Mimecast Microsoft 365 Defender Entra ID Network security Firewall technologies PowerShell Python KQL Troubleshooting Root-cause analysis Documentation Stakeholder management

Requirements

Candidates must have 2-4 years of experience in cyber security, IT infrastructure, or MSSP environments with hands-on knowledge of security platforms like Bitdefender. Strong technical troubleshooting skills, proficiency in scripting languages like PowerShell or Python, and a solid understanding of network security fundamentals are required.

Benefits

Holiday allowance Bank holidays Birthday leave Hybrid working options Enhanced maternity leave Enhanced paternity leave Enhanced adoption leave Paid volunteering day Health benefits Financial wellbeing benefits Pension

Full description

Cyber Security Engineer Level 2

Department: Technical Operations

Employment Type: Permanent

Location: Remote

Compensation: £35,000 / year

Description

Cybersecurity Engineer (Level 2) Hybrid (Manchester)

As a Cybersecurity Engineer (Level 2), you'll play a key role in delivering, configuring and supporting Focus Group's managed security services. Acting as a Tier 2 escalation point, you'll provide advanced technical support, perform root-cause analysis on complex issues, and ensure customer environments remain secure, optimised and aligned to best practice.

Working closely with our Security Operations Centre (SOC), Engineering teams and Cybersecurity Engineering Lead, you'll support the deployment and management of security platforms including Bitdefender GravityZone, RocketCyber, SaaS Alerts, Mimecast, VulScan and vPentest.

This role is ideal for someone with strong technical troubleshooting skills, a passion for cyber security, and experience operating within an MSP, MSSP, SOC or IT infrastructure environment.

Key Responsibilities

  • Deploy, configure and validate managed security platforms including Bitdefender GravityZone, RocketCyber, SaaS Alerts, Mimecast, VulScan and vPentest
  • Act as the Tier 2 escalation point for cyber security platform incidents and support requests
  • Perform root-cause analysis to identify and resolve recurring technical issues
  • Maintain the health and performance of customer security environments, ensuring agents, integrations and policies are operating effectively
  • Configure and manage security policies, alerting, integrations and platform settings
  • Analyse logs, alerts and security events to identify issues, misconfigurations and potential threats
  • Support the optimisation of security tools to improve detection capability and service reliability
  • Collaborate with SOC analysts, IT Support teams and third-party vendors to resolve complex issues
  • Produce and maintain high-quality technical documentation, knowledge articles and support records
  • Contribute to service improvements, operational processes and standard operating procedures
  • Mentor and support Level 1 Engineers, helping develop technical capability across the team
  • Continue professional development through training, certifications and hands-on experience

Skills, Knowledge & Expertise

Essential

  • 2-4 years' experience within Cyber Security, IT Infrastructure, SOC or MSSP environments
  • Hands-on experience deploying and supporting Bitdefender GravityZone EPP/EDR
  • Strong understanding of Microsoft 365 Defender and Entra ID security administration
  • Experience supporting security platforms such as RocketCyber, SaaS Alerts and Mimecast
  • Knowledge of network security fundamentals and firewall technologies
  • Ability to investigate security alerts, logs and technical incidents
  • Experience with PowerShell, Python, KQL or similar scripting/query languages
  • Strong troubleshooting and problem-solving skills with a structured approach to root-cause analysis
  • Excellent organisational and documentation skills
  • Ability to manage multiple priorities and own incidents through to resolution
  • Strong communication and stakeholder management skills

Desirable

  • CompTIA Security+, Microsoft SC-200, AZ-500 or equivalent cyber security certifications
  • Experience with vulnerability management and remediation programmes
  • Exposure to SOC operations, incident investigation or detection engineering
  • Understanding of SIEM platforms and detection rule development
  • Automation and scripting experience
  • Familiarity with ServiceNow or other ITSM platforms
  • Knowledge of Cyber Essentials, ISO 27001 and NIST frameworks
  • Experience working on customer-facing cyber security projects

Job Benefits

  • Holiday Allowance - 24 days + bank holidays + birthday leave. 
  • Hybrid working options - performance depending. 
  • Enhanced maternity, paternity and adoption leave. 
  • Paid volunteering day * regular charity events.
  • Wider company benefits across health, financial wellbeing, Pension etc.

Similar roles