Information and Cyber Security Operations Engineer

About this role

As one of the world's largest networks of audit, tax and consulting firms, RSM delivers big ideas and premium service to help middle-market businesses thrive. We are a fast-growing firm with big ambitions -- we have a clear goal to become the premium adviser to the middle market, globally. This vision touches everything we do, motivating and inspiring us to become better every day. If you are looking for a firm where you can build a future and make an impact, then RSM is the place for you.

Make an Impact at RSM UK

The Cyber Security Operations Engineer will be responsible for working in conjunction with our MSSP to monitor, detect and respond to security incidents to protect our systems, networks and information assets. This role involves working closely with our MSSP and various departments to ensure the security of our digital infrastructure and compliance with security policies.

You’ll make an impact by

• Define and govern security configurations across Microsoft security tools and key third‑party platforms (e.g. Mimecast, Palo Alto, Cortex), including policies, settings, and exemptions.
• Oversee MSSP performance, ensuring effective monitoring, detection, and incident response, and acting as a key escalation and response partner during incidents.
• Prioritise and manage security use cases, rules, and alerts for MSSP implementation, with a focus on improving detection coverage and effectiveness.
• Develop and maintain SecOps continuous improvement (RSM UK and MSSP), including automation, optimisation of processes, and enhancement of detection capabilities.
• Define, document, and maintain operational knowledge, including incident response processes, run-books, and a central knowledge base for MDR/XDR alerts.

What we are looking for

Are you someone who thrives on variety, loves learning new things, and enjoys connecting with people? If you can spot inefficiencies in everyday life and are passionate about making improvements, this role is perfect for you!

• We value diverse experiences and perspectives. Here’s what we’re looking for in our ideal candidate:
• Strong understanding of networking and security fundamentals, including protocols, architectures, and security methodologies.
• Proven experience in security operations, with solid application of core security principles and best practices.
• Hands-on expertise with security tools such as SIEM, firewalls, IDS/IPS, malware protection, and vulnerability scanning.
• Experience with Microsoft security stack, including its core security and threat protection capabilities.
• Excellent analytical, problem-solving, and communication skills, with the ability to collaborate effectively across teams and respond to incidents.

What we can offer you

We recognise that our people are our most important assets. That’s why we offer a flexible reward and benefits package that will help you have fulfilling experience, both in and out of work.

• Hybrid and Flexible working
• 26 Days Holiday (with the option of purchasing additional days)
• Lifestyle, Health, and Wellbeing including financial wellbeing benefits such as financial tools, electric car scheme and access to a virtual GP
• Access to a suite of 300+ courses on demand developed by our inhouse Talent Development team

Diversity and Inclusion at RSM

At RSM, we want to create a strong sense of belonging so that people of all identities, backgrounds, and cultures feel they can bring their true self to work. Our clients come from all walks of life. We aim to achieve that same diversity of background, experience and perspective in our own teams, so that we can genuinely understand our client's needs. Diverse teams bring a broader range of ideas and insights to work. That's why we're working together to ensure our firm's principles and processes support a firm culture that embraces difference and strengthens inclusion.

About cyber security & digital forensics roles for ex-police

Cyber security, digital forensics and incident-response roles. DMIs, cybercrime investigators and digital forensics officers bring evidential discipline and investigative judgement that DFIR and security teams struggle to hire.