CyberOne

Security Engineer

• Act as a Subject Matter Expert for Microsoft Azure security, Microsoft Sentinel, Microsoft Defender XDR and associated Microsoft security technologies
• Design, implement and support enterprise security controls across Azure, Microsoft Entra ID and the Microsoft security ecosystem
• Engineer and maintain Microsoft Sentinel capabilities, including data connectors, analytics rules, KQL queries, workbooks, watchlists, automation rules and playbooks
• Design, implement and optimise Microsoft Defender capabilities across Endpoint, Identity, Cloud, Office 365 and Defender XDR
• Develop security monitoring use cases, threat detections and hunting queries aligned to business risks, threat intelligence and MITRE ATT&CK
• Design secure cloud and hybrid architecture patterns and provide technical guidance to projects and engineering teams
• Engineer telemetry and logging solutions using Azure Monitor, Log Analytics, Azure Monitor Agent, Data Collection Rules, custom tables and API integrations
• Design and implement security automation using Logic Apps, Azure Functions, REST APIs, PowerShell and Python
• Perform technical security assessments and review cloud solutions against enterprise security standards and secure-by-design principles
• Implement and maintain cloud security baselines, hardening standards, policy controls and configuration-management practices
• Support vulnerability and configuration-risk remediation across Azure and Microsoft security platforms
• Support cyber incident investigations and provide security expertise during critical incidents and major technology changes
• Produce and maintain high-level designs, low-level designs, engineering standards, operating procedures, support documentation and implementation records
• Lead platform enhancements, proof-of-concepts, migrations, upgrades, troubleshooting and service-improvement activities
• Build platform health monitoring, operational dashboards and KPI/KRI reporting for the Proactive Security function
• Collaborate with Security Operations, Infrastructure, Cloud Engineering, Architecture, Identity and Application teams to strengthen cyber resilience

Senior Azure Security Engineer

Content Marketing Manager

• Act as a Subject Matter Expert for Microsoft Sentinel, detection engineering, security monitoring architecture, and associated security platforms
• Design, develop, test, deploy, and tune analytics rules, correlation logic, threat-hunting queries, and reusable detection content aligned with MITRE ATT&CK
• Engineer and optimise data connectors, ingestion pipelines, Data Collection Rules, custom parsers, custom tables, and API-based integrations
• Develop logging standards, onboarding patterns, use-case documentation, and governance for the detection engineering lifecycle
• Design and implement automation using Logic Apps, Azure Functions, REST APIs, PowerShell, and Python
• Perform security engineering activities including secure solution design, technical risk assessment, platform hardening, vulnerability remediation, and security control validation
• Support integration and engineering of endpoint, identity, cloud, network, and infrastructure security controls with the SIEM and Defender ecosystem
• Build Sentinel Workbooks, dashboards, platform health monitoring, and KPI/KRI reporting for the Proactive Security function
• Produce and maintain High-Level Designs, Low-Level Designs, engineering standards, operating procedures, and support documentation
• Lead platform enhancements, proof-of-concepts, migrations, upgrades, troubleshooting, and technical support during critical incidents and major changes
• Collaborate with Security Operations, Infrastructure, Cloud, and Application teams to deliver scalable telemetry, high-fidelity detections, secure integrations, and continuous improvement of proactive security monitoring

SIEM Content Engineer

Incident Response Analyst

• Monitor and analyse alerts from SIEM, EDR/XDR, identity, email, cloud, network, and other security platforms
• Triage alerts, validate incidents, assess severity and business impact, and escalate according to defined processes and service levels
• Lead or support investigations into phishing, malware, account compromise, unauthorised access, data loss, and network-based attacks
• Coordinate containment, eradication, and recovery activities with internal teams and client stakeholders
• Maintain incident records, timelines, evidence, actions, and decision logs
• Produce incident reports, management updates, and post-incident summaries
• Collect, preserve, and analyse endpoint, server, identity, network, email, and cloud artefacts
• Perform host and network analysis using security logs, packet captures, forensic images, and telemetry data
• Identify indicators of compromise and attacker TTPs, mapping findings to MITRE ATT&CK
• Support sensitive investigations while maintaining evidence integrity and chain-of-custody requirements
• Develop and execute proactive, intelligence-led threat hunting activities
• Create, tune, and optimise detection rules, correlation logic, monitoring content, and custom indicators
• Identify detection gaps and improve detection and response capabilities
• Support purple-team exercises, penetration testing, and security control validation
• Act as a trusted security advisor during incidents and lead client communications
• Facilitate incident review meetings and present findings, recommendations, and lessons learned
• Collaborate with Security Operations, Professional Services, and Customer Success teams
• Develop, maintain, and improve incident response plans, playbooks, runbooks, and procedures
• Conduct post-incident reviews and root cause analyses
• Contribute to service reporting, risk indicators, trend analysis, and operational metrics
• Support cyber simulations and tabletop exercises
• Stay current with emerging threats, attack techniques, vulnerabilities, and industry best practices

AI Engineer

• Serve as the subject matter expert for Microsoft Purview, Copilot, and Agent 365
• Lead the design and implementation of Microsoft Purview deployments aligned with customer requirements and best practices
• Deliver secure and compliant AI engagements using Agent 365, Azure OpenAI, Azure Machine Learning, and Microsoft Cognitive Services
• Monitor evolving data privacy and AI compliance regulations and ensure client controls remain aligned
• Provide technical leadership and mentorship to engineering teams
• Collaborate with internal stakeholders to grow organisational knowledge
• Act as a trusted advisor to clients and develop data security and AI strategies
• Support sales with client scoping, RFP responses, and proposal authoring
• Own CyberOne’s Data Security & AI roadmap and position the organisation as a forerunner in AI

Data & AI Lead

Associate

• Shadow the Microsoft Practice Director across technical, strategic, and customer-facing activities
• Attend and participate in customer meetings, executive briefings, partner engagements, seminars, webinars, conferences, and industry events
• Support and progressively contribute to technical presales engagements, customer workshops, and solution discussions
• Research customers, technologies, industry trends, and emerging market opportunities to support business development
• Help translate customer business requirements into potential technology and cybersecurity solutions
• Support preparation of proposals, presentations, Statements of Work, and customer-facing documentation
• Present CyberOne's capabilities, services, and value propositions to customers and prospects as experience develops
• Develop knowledge across Microsoft Sentinel, Defender XDR, Entra, Purview, Azure, Copilot, Microsoft 365, and emerging Microsoft technologies
• Participate in service development and innovation initiatives with technical specialists and leadership
• Research emerging cybersecurity trends, Microsoft technologies, AI advancements, and industry best practices
• Contribute ideas toward new services, intellectual property, technology capabilities, and business opportunities
• Support technical thought leadership content, presentations, webinars, and industry speaking engagements
• Work closely with Microsoft and other strategic technology partners
• Travel to customer sites, CyberOne offices, partner facilities, conferences, and industry events when required
• Demonstrate continuous learning, development, and professional growth
• Incorporate information security considerations into day-to-day activities, decisions, and interactions

Practice Associate

QA Engineer

• Conduct comprehensive penetration testing engagements against enterprise infrastructure, networks, systems, and applications
• Perform manual and automated security assessments to identify vulnerabilities, weaknesses, and potential attack vectors
• Assess and exploit Active Directory environments, including misconfigurations, privilege escalation paths, lateral movement opportunities, credential theft vulnerabilities, and excessive permissions or insecure delegation
• Execute network and system exploitation activities to validate security weaknesses and assess their impact
• Evaluate security controls, hardening measures, and defensive configurations within Active Directory environments
• Simulate real-world attack scenarios to assess organizational resilience against cyber threats
• Develop detailed technical reports covering attack paths, findings, business impact, proof-of-concept evidence, and remediation recommendations
• Present technical findings to technical and non-technical stakeholders
• Work with internal teams and clients to support remediation efforts and provide security best-practice guidance
• Stay current with emerging threats, attack techniques, exploitation methodologies, and security technologies

Penetration Tester

Solutions Engineer

• Run discovery sessions with business and technical teams
• Map existing processes, systems, pain points and manual activities
• Identify and prioritise opportunities for AI and automation
• Challenge existing processes and design improved future-state workflows
• Translate business problems into technical requirements and solution designs
• Build prototypes and proofs of concept to validate ideas quickly
• Develop AI applications, agents and automation workflows
• Integrate AI solutions with existing systems, APIs and data sources
• Integrate disparate systems to automate workflows and remove manual effort
• Design human-in-the-loop controls, guardrails and monitoring
• Test solutions and measure effectiveness against defined business outcomes
• Take successful prototypes through to production
• Support teams with adoption and new ways of working
• Help establish reusable AI architecture, engineering patterns and best practices
• Contribute to the organisation's longer-term internal AI and automation roadmap
• Improve operational efficiency by reducing manual processing, automating repetitive tasks, improving turnaround times, reducing errors, improving knowledge access and enabling better-informed decisions

AI Solutions Engineer

• Run discovery sessions with business and technical teams
• Map existing processes, systems, pain points, and manual activities
• Identify and prioritise opportunities for AI and automation
• Challenge existing processes and design improved future-state workflows
• Translate business problems into technical requirements and solution designs
• Build prototypes and proofs of concept
• Develop AI applications, agents, and automation workflows
• Integrate AI solutions with existing systems, APIs, and data sources
• Integrate disparate systems to automate workflows and remove manual effort
• Design human-in-the-loop controls, guardrails, and monitoring
• Test solutions and measure effectiveness against defined business outcomes
• Take successful prototypes through to production
• Support teams with adoption and new ways of working
• Establish reusable AI architecture, engineering patterns, and best practices
• Contribute to the longer-term internal AI and automation roadmap
• Build AI systems, agents, automation, support assistants, workflow automation, and AI capabilities embedded in existing applications as opportunities arise