security engineer in critical infrastructure

Cyro Cyber is a specialist cybersecurity consultancy founded in 2021. It helps public sector and financial organisations protect their Critical Digital Infrastructure by providing independent cybersecurity advice and services. The consultancy operates across the UK, with offices in London and Farnborough.

• Design, implement and strengthen security across Azure and Microsoft 365 environments for critical infrastructure and transformation projects within the NRTS programme
• Translate security requirements into practical, secure solutions and lead the engineering delivery of cloud security controls across identity, privileged access, governance, networking, monitoring and data protection
• Use automation and Infrastructure as Code to deliver scalable, secure-by-design solutions and maintain compliant, resilient and operationally effective platforms
• Collaborate with clients, engineers and stakeholders, provide security assurance, and contribute to developing cloud security services and best practices
• Implement and improve Azure and Microsoft 365 security controls
• Secure cloud identities, privileged access, networks, workloads and data
• Develop automated, repeatable security solutions using Infrastructure as Code
• Produce technical designs, documentation and operational standards
• Conduct security reviews, hardening activities and technical assurance
• Support clients and project teams with cloud security guidance

• Strong hands-on experience engineering and securing Microsoft Azure environments
• Practical capability across Azure security domains, including identity, governance, networking, workload protection, logging and secrets management
• Experience with Microsoft Entra ID, including practical exposure to Privileged Identity Management, and Azure security technologies such as Azure Policy, Defender for Cloud, Key Vault, Azure Monitor and Log Analytics
• Experience using infrastructure-as-code or scripting tools such as Bicep, Terraform, PowerShell or Azure CLI
• Ability to translate architectural requirements and HLDs into accurate LLDs, build documentation, test plans and operational runbooks
• Strong troubleshooting skills and experience resolving cloud configuration, access, policy and integration issues
• Understanding of cloud security principles, including least privilege, defence in depth, secure-by-design, segmentation, encryption and continuous monitoring
• Good client-facing communication, documentation and stakeholder engagement skills
• Ability to work autonomously under general direction, lead defined work packages and guide colleagues where appropriate
• Eligibility for UK Security Clearance; successful appointment is subject to being granted Security Clearance
• Willingness to work across varied cloud security engineering activities, applying existing strengths while developing capability in other areas

• Matched or contributory pension scheme
• Online GP service, available 24 hours a day, 365 days a year
• Employee assistance programme
• My Rewards portal with access to retail discounts
• Life assurance
• Enhanced maternity, paternity and adoption leave
• Reward and recognition scheme
• Salary sacrifice EV/hybrid car scheme
• Private health care and health care cash plan
• Discretionary bonus schemes
• 26 Days of annual leave plus bank holidays
• Recommend-a-friend reward
• Certain roles are subject to third-party background checks; some roles require drug and alcohol testing during induction and onboarding