Information and Cyber Security Operations Engineer

Make an Impact at RSM UK The Cyber Security Operations Engineer will be responsible for working in conjunction with our MSSP to monitor, detect and respond to security incidents to protect our systems, networks and information assets. This role involves working closely with our MSSP and various departments to ensure the security of our digital infrastructure and compliance with security policies. You’ll make an impact by: Define and govern security configurations across Microsoft security tools and key third‑party platforms (e.g. Mimecast, Palo Alto, Cortex), including policies, settings, and exemptions. Oversee MSSP performance, ensuring effective monitoring, detection, and incident response, and acting as a key escalation and response partner during incidents. Prioritise and manage security use cases, rules, and alerts for MSSP implementation, with a focus on improving detection coverage and effectiveness. Develop and maintain SecOps continuous improvement (RSM UK and MSSP), including automation, optimisation of processes, and enhancement of detection capabilities. Define, document, and maintain operational knowledge, including incident response processes, run-books, and a central knowledge base for MDR/XDR alerts.