Cyber Engineer
| Posting date: | 15 July 2025 |
|---|---|
| Hours: | Full time |
| Closing date: | 14 August 2025 |
| Location: | Edinburgh, EH12 1HQ |
| Company: | NatWest Group |
| Job type: | Permanent |
| Job reference: | R-00260931 |
Summary
Join us as a Cyber Engineer
- Take on a new challenge and use your specialist knowledge to support the wider organisation in building and operating secure services that protect both colleagues and customers
- You’ll act as a subject matter expert in a security related field, making sure that the security implications of the backlog are understood in the right way, building security early into design
- You’ll be joining an exciting and fast-paced area of the bank, where you can expect great exposure both for you and your work
- You’ll work from home some of the time, but you’ll also spend a minimum of one day per week working from the Edinburgh office
What you'll do
As a Cyber Engineer, you’ll work at a domain level to understand and ensure robust security is continuously considered and incorporated at every stage, programme increment and feature team delivery throughout the development lifecycle and through to support.
You’ll collaborate with feature teams and participate in story refinement, sprint planning and retrospective sessions, establishing a culture of innovation and strategic thinking that makes sure that the bank has knowledge of, and opportunities to exploit, the latest developments in your area of specialism.
You’ll also be:
- Supporting with the identification of risks, while contributing to risk management strategies to achieve business objectives and customer outcomes
- Understanding and implementing Agile methodologies and actively contributing to finding opportunities to build security early into design
- Making sure that decisions made are based on robust data, return on investment and value measures that demonstrate thoughtful and intelligent cost management
- Actively contributing to your centre of excellence (CoE) specialism by cross sharing learnings and best practice with CoE and community of practice colleagues
- Building and leveraging relationships with colleagues across the bank and third parties to ensure decisions made are commercially focused and create long term value for the organisation
- Supporting complex live service issues across toolsets covering NIDs, EDR and cloud platforms and work with teams and vendors to troubleshoot and resolve these issues
The skills you'll need
To be successful in this role, you’ll need knowledge of one or more security subject areas and experience of setting risk appetites. You’ll also demonstrate experience of, or a willingness to learn risk management frameworks.
Additionally, you’ll need:
- Experience in delivering the design, implementation, and optimisation of security monitoring and automation use cases across industry leading EDR and SIEM solution platforms
- Experience utilising the MITRE Attack Framework for Use Case life cycle management and mapping
- Hands on experience in implementing and managing security controls across multiple cloud environments such as AWS, GCP and Azure
- The ability to write technical issues in business terms