Information and Cyber Security Operations Engineer

• Strong understanding of networking and security fundamentals, including protocols, architectures, and security methodologies.
• Proven experience in security operations, with solid application of core security principles and best practices.
• Hands-on expertise with security tools such as SIEM, firewalls, IDS/IPS, malware protection, and vulnerability scanning.
• Experience with Microsoft security stack, including its core security and threat protection capabilities.
• Excellent analytical, problem-solving, and communication skills, with the ability to collaborate effectively across teams and respond to incidents.

We recognise that our people are our most important assets. That's why we offer a flexible reward and benefits package that will help you have fulfilling experience, both in and out of work.

• Hybrid and Flexible working
• 26 Days Holiday (with the option of purchasing additional days)
• Lifestyle, Health, and Wellbeing including financial wellbeing benefits such as financial tools, electric car scheme and access to a virtual GP
• Access to a suite of 300+ courses on demand developed by our inhouse Talent Development team

As one of the world's largest networks of audit, tax and consulting firms, RSM delivers big ideas and premium service to help middle-market businesses thrive. We are a fast-growing firm with big ambitions -- we have a clear goal to become the premium adviser to the middle market, globally. This vision touches everything we do, motivating and inspiring us to become better every day. If you are looking for a firm where you can build a future and make an impact, then RSM is the place for you.

The Cyber Security Operations Engineer will be responsible for working in conjunction with our MSSP to monitor, detect and respond to security incidents to protect our systems, networks and information assets. This role involves working closely with our MSSP and various departments to ensure the security of our digital infrastructure and compliance with security policies.

You'll make an impact by:

• Define and govern security configurations across Microsoft security tools and key third‑party platforms (e.g. Mimecast, Palo Alto, Cortex), including policies, settings, and exemptions.
• Oversee MSSP performance, ensuring effective monitoring, detection, and incident response, and acting as a key escalation and response partner during incidents.
• Prioritise and manage security use cases, rules, and alerts for MSSP implementation, with a focus on improving detection coverage and effectiveness.
• Develop and maintain SecOps continuous improvement (RSM UK and MSSP), including automation, optimisation of processes, and enhancement of detection capabilities.
• Define, document, and maintain operational knowledge, including incident response processes, run-books, and a central knowledge base for MDR/XDR alerts.

Are you someone who thrives on variety, loves learning new things, and enjoys connecting with people? If you can spot inefficiencies in everyday life and are passionate about making improvements, this role is perfect for you!