Cyber Security Engineer - Global Law Firm | Hybrid (2 days onsite) or Remote Join a global law firm as a hands-on Cyber Security Engineer and play a key role in a growing SecOps function, protecting a modern Microsoft and cloud-based environment. This is a highly technical role focused on incident response, SIEM optimisation, vulnerability management, and security engineering, helping drive the firm''s Zero Trust journey and supporting key security frameworks. Location: London, Manchester, Birmingham, Leeds or Colchester Working pattern: Hybrid (2 days onsite) or primarily remote with occasional office attendance What you''ll be doing Lead and support incident response, investigation, and root cause analysis Monitor and optimise SIEM tooling to improve detection capability Drive vulnerability management, remediation, and risk reduction Secure cloud and infrastructure across the Microsoft security stack Implement key security controls including MFA, SSO, PAM, Firewalls, and email security Collaborate with infrastructure, endpoint, and network teams to improve security posture What we''re looking for 3+ years'' experience in a hands-on cyber security/SecOps role Strong experience with Microsoft Defender, Sentinel, Entra ID, and Intune Experience with SIEM, incident response, and vulnerability management Knowledge of identity and access management (MFA, SSO, PAM) Experience with PowerShell, KQL, or similar Scripting/query tools Strong communication and documentation skills Co