Conduct periodic security audits and risk assessments, offering actionable recommendations.
Security tooling engineering and maintenance
Day to day maintenance of various security tools including SIEM and vulnerability scanning toolsets.
Manage upgrades, configuration changes and feature enhancements.
Support the Cyber Incident Response team
Provide support on all types of cyber incident response as part of the wider cyber response function.
Use tooling such as SIEM, EDR, IdP
Key Requirements
Experience in an IT engineering capacity.
Hands-on experience administering Azure security environments.
Strong experience managing compute, network, and storage resources across cloud and hybrid environments.
Extensive knowledge of Azure services, Microsoft Defender, Conditional Access, and Google Cloud security tools.
Strong understanding of SIEM platforms, vulnerability management tools, and supporting infrastructure.
Broad knowledge of core IT domains, including infrastructure, software development, databases, cloud platforms, and identity and access management (IAM).
Strong engineering background with expertise in Windows Server, endpoint platforms, macOS, and Linux.
Strong knowledge of information security frameworks, including NIST and relevant NIST 800-series publications.
Hands-on experience with SIEM technologies, including data ingestion, monitoring, alerting, and integration with security operations processes.
Proficiency in Terraform and infrastructure-as-code (IaC) best practices.
Excellent written and verbal communication skills, with the ability to explain technical concepts to both technical and non-technical audiences.
Desirable Certifications
Relevant cloud and security certifications, such as
Microsoft Certified: Azure Security Engineer Associate
Google Professional Cloud Security Engineer
Other equivalent cloud security certifications
Department Overview
Formed in 2014, the Information Security Group (ISG) focuses on delivering operational and strategic information / cyber security and business continuity. The group is independent of IT. Operationally the Information Security Committee and Conduct and Risk Committee oversee the group. The Chief Global Information Security Officer reports into the General Counsel and Global Risk Partner.
The ISG department is based mainly in the firm’s London and Manchester offices.
Inclusion
Freshfields is an equal opportunities employer and all applications received by the firm will be considered on the basis of their merit alone. We welcome applications from all suitably qualified individuals regardless of background. All offers of employment will be conditional on the candidate having/securing the right to work in the UK in the role in question and providing the firm with evidence of that right (as required by the Immigration, Asylum and Nationality Act 2006) prior to employment commencing.
Freshfields is a Ban the Box employer. We ask applicants to disclose criminal convictions only if and when a conditional job offer is made. A conviction does not automatically lead to withdrawal of the offer: we make decisions on a case-by-case basis and take a number of relevant factors into account (e.g. the role you are applying for and the circumstances of the offence). You would have the opportunity to discuss the matter with us before we make a decision.
