Cyber Security Engineer

Cyber Security EngineerOverview:We are seeking a hands-on IT & Cyber Security Engineer to join our IT team within a large Irish multinational where security excellence and operational delivery go hand in hand.Cybersecurity is the core focus of this role. The successful candidate will own and drive the organisation's security accreditation and certification programme while continuously improving security maturity toward recognised industry standards. The role requires awareness of the regulatory landscape including NIS2 and GDPR obligations.This is a key role responsible for embedding practical security controls, governance, and standards that keep the organisation secure and audit-ready. The role also contributes across the wider IT function in a collaborative, hands-on environment.Key Responsibilities:Cyber & Information Security:Security Controls & Accreditation:Own and maintain Cyber Essentials Plus (CE+) accreditation and ongoing readinessEnhance security maturity aligned with ISO 27001 and recognised industry frameworksEnsure security controls align with recognised industry best practices across:Boundary firewalls and internet gatewaysSecure configuration of servers, endpoints, and cloud servicesUser access control and privileged access managementMalware protection and endpoint securityPatch and vulnerability managementPrepare and maintain documentation, evidence, and artefacts required for security audits and technical assurance activitiesSupport external assessors during audits, penetration testing, and verification activitiesSecurity Operations & Governance:Own and evolve security policies, procedures, and standards aligned with CE+, ISO 27001, and broader frameworks (e.g. CIS, NIST)Maintain awareness of applicable regulatory obligations including NIS2 and GDPR, particularly in the context of incident response and breach notificationManage and optimise security configurations within Microsoft 365 and Azure, including:Conditional access and Entra IDMulti-factor authentication (MFA)Device compliance via Microsoft IntuneMicrosoft Defender for Endpoint and Defender for IdentityMicrosoft Sentinel for security monitoring and incident detectionIdentify security risks and vulnerabilities and drive remediation through to closureLead and coordinate cyber incident and breach management, including detection, investigation, containment, remediation, and lessons learnedDeliver security awareness and acceptable-use trainingSystems Administration & General IT:Act as a senior escalation point for IT support issuesSupport and administer core platforms including Microsoft 365, Azure, Active Directory, and VMware / vCentreEnsure systems are securely configured by default in line with industry best practiceContribute to general IT improvement initiatives in a small, hands-on environment Requirements:Essential:Degree in Computer Science, Information Technology, or a related discipline4–5 years' hands-on experience in an IT role with cybersecurity as a primary focusDemonstrable experience implementing and owning security controls aligned to recognised frameworks (e.g. CE+, ISO 27001, CIS, NIST)Practical experience with firewalls and boundary protection, identity and access management (including MFA and least privilege), patch management, vulnerability remediation, and endpoint protectionHands-on experience with the Microsoft security stack: Defender for Endpoint, Defender for Identity, Sentinel, Intune, and Entra IDStrong experience with Microsoft 365, Azure, Active Directory, and VMware / vCentreUnderstanding of NIS2, GDPR, and applicable regulatory obligations as they relate to security operationsExperience owning and maintaining security policies and proceduresFamiliarity with security audit processes, evidence requirements, and technical testing expectationsComfortable working in a small, generalist IT team and contributing beyond core security responsibilitiesStrong collaboration and communication skills with a practical, delivery-focused mindsetDesirable:Cyber security certifications (e.g. CompTIA Security+, SSCP, or equivalent)Hands-on experience with ISO 27001 implementation or ISMS developmentExperience tuning and operating SIEM tools, e.g. Microsoft SentinelExposure to SOC environments or incident response operationsExperience supporting security certification or re-certification activitiesPersonal Attributes:Proactive and confident taking ownership in a small organisationStrong attention to detail, particularly around audit readiness and evidencePragmatic mindset, balancing strong security with real-world IT deliveryCurious and committed to continuous improvement in cybersecurity practices