Cyber Security Engineer/Specialist

Cyber Security Engineer/Specialist

Permanent | Up to £80,000 (+ Benefits)
Hybrid Working (2–3 days per week Onsite) | Surrey

Protect Critical Services. Strengthen Cyber Resilience. Make a Tangible Impact.

Exalto Consulting is pleased to be supporting a well-established international organisation in the search for an experienced Cybersecurity Engineer / Specialist.

Operating across complex, fast-paced environments where security, resilience and continuity are essential, our client is investing further in its cybersecurity capability. This role offers the opportunity to work at the heart of that effort, helping to protect critical systems, safeguard sensitive information and strengthen defences against an evolving threat landscape.

This position would suit a cybersecurity professional who combines strong technical expertise with a practical, collaborative approach and a genuine interest in continuous improvement.

You will play a key role in monitoring, assessing and responding to cyber risks across the organisation's technology estate.
Working closely with technology, infrastructure and risk stakeholders, you will help ensure security controls remain effective, support incident readiness activities and contribute to the ongoing development of the organisation's cybersecurity strategy.

This is a hands-on position where your analysis, judgement and technical knowledge will directly influence the security and resilience of business-critical operations.

You will bring a solid track record in cybersecurity and a practical understanding of how security supports broader business objectives.

Essential Experience

• At least 5 years' experience in cybersecurity, information security or a closely related field
• Experience working with recognised security frameworks, including Cyber Essentials and CIS Benchmarks
• Good understanding of NIST and ISO27001 principles and controls
• Experience supporting security operations within complex technology environments

Technical Knowledge

• Security Information and Event Management (SIEM) platforms
• Security Orchestration, Automation and Response (SOAR) solutions
• Threat intelligence and threat modelling frameworks, including MITRE ATT&CK and Cyber Kill Chain
• Network security, operating systems and security technologies
• Microsoft security technologies, including Microsoft Defender and Purview
• Data Loss Prevention (DLP) solutions
• AI-driven threat detection and security monitoring tools
• Cloud platforms such as Azure and AWS
• Backup, disaster recovery and business continuity technologies
• DevSecOps principles and practices

Experience with technologies such as Qualys, Splunk, SolarWinds, Kubernetes, PowerShell, Python, Windows Server, Linux, New Relic, HashiCorp, Zerto and Jira would be advantageous.

Applicants should hold a recognised cybersecurity qualification such as:

• CISSP
• CISM
• CEH
• GIAC

Equivalent certifications will also be considered.

If you're looking for a role where your expertise will be valued and your work will have visible impact, we'd welcome your application.