Job title: Cybersecurity and Infrastructure Resilience Engineer
Department: Cybersecurity
Reports to: Head of Cybersecurity, Infrastructure and Repository Management

Role purpose:

Protect the organisation’s systems and data by operating secure infrastructure, maintaining reliable backup and recovery capabilities, and responding to cybersecurity threats.

Working with the Head of Cybersecurity, Infrastructure and Repository Management, system owners, and technology partners, you will strengthen operational resilience, investigate security alerts, remediate vulnerabilities, and verify that critical services can be restored within agreed business requirements.

Key responsibilities:

Infrastructure resilience and recover.

• Administer and monitor backup, replication, and storage platforms across on-premises and cloud environments.
• Investigate backup failures and verify recoverability through scheduled restoration tests.
• Maintain disaster recovery runbooks and coordinate exercises against approved recovery time objectives and recovery point objectives.
• Implement and validate immutable backups and isolated or air-gapped recovery arrangements where required by the approved design.
• Administer virtualization and supporting infrastructure, including Proxmox VE and Hyper-V, with attention to availability, capacity, performance, and secure configuration.

Security operations and infrastructure protection

• Monitor security alerts and relevant endpoint, identity, and network logs; investigate and document suspected security events.
• Perform initial containment within approved playbooks and escalate incidents according to severity and agreed response timelines.
• Maintain firewall rules and secure configuration baselines through documented reviews and change controls.
• Identify and prioritise vulnerabilities with system owners, track remediation, and verify that fixes are effective.
• Operate identity security controls and investigate suspicious authentication or credential activity.
• Support post-incident reviews and implement agreed improvements to monitoring, protection, and recovery.

Operational assurance

• Maintain accurate technical documentation, recovery procedures, and operational records.
• Provide evidence for audits and support security awareness activities.
• Automate routine tasks and coordinate technical issues with vendors and service providers.

Qualifications and experience

• Approximately five years of relevant IT experience, including practical responsibility for infrastructure administration, backup and recovery, and cybersecurity operations.
• A degree in Information Technology, Computer Science, Cybersecurity, or a related discipline, or equivalent relevant professional experience.
• Demonstrated experience restoring systems or data and supporting disaster recovery testing.
• Practical knowledge of Windows Server, Linux, virtualization, networking, firewalls, and identity services.
• Experience investigating security alerts and coordinating vulnerability remediation.
• Ability to document technical procedures, prioritise operational issues, and communicate clearly with technical and business stakeholders.
• Working knowledge of PowerShell, Bash, or Python for routine automation.
• Experience with HYCU/Veeam, Proxmox VE, Hyper-V, SAN/NAS storage, and cloud backup services.
• Exposure to SIEM, EDR, NDR, and identity threat detection tools.
• Familiarity with NIST CSF 2.0 and its application to operational security.
• A relevant certification such as Security+, CySA+, GSEC, or backup, infrastructure, or disaster recovery certification.