Lead Cyber Security Engineer

At Ofgem, we stand at the forefront of cyber security, protecting critical infrastructure and ensuring the energy industry remains resilient against modern threats. We’re looking for a Lead Cyber Security Engineer to join us and take on a pivotal role in shaping the security of our digital operations while collaborating with experts to drive robust solutions.

Ofgem is Great Britain’s independent energy regulator. We’re at the forefront of change across the energy sector, driving toward Net Zero whilst protecting energy consumers - especially vulnerable people.

We’re offering a permanent position where you will have the opportunity to work in a high-profile role alongside experienced cyber security professionals. With access to cutting-edge technologies, you’ll be playing a leading role in exciting, fast-paced work that directly impacts the security posture of the energy sector. This role provides autonomy, allowing you to collaborate with stakeholders and teams across Ofgem to implement innovative solutions and protect vital systems.

In this role, you’ll be supported by a small but skilled team, with a focus on collaborative working and professional development. You’ll work closely with our digital colleagues, contributing to critical initiatives that strengthen our cyber resilience. With fully flexible working arrangements, including hybrid working from centrally located offices in London, Cardiff, or Glasgow, this is a unique opportunity to advance your career in a dynamic and supportive environment.

We’re looking for someone with extensive experience in configuring and managing security systems, particularly within a Windows environment. You’ll bring expertise in security operations and a thorough understanding of security principles, coupled with the ability to communicate effectively and influence at all levels.

Learning and development are high priorities in this area, and Ofgem provides significant opportunities for professional growth. With a focus on work-life balance, a collaborative culture, and a role that offers both autonomy and challenge, this is an exciting time to join our team.

We have a critical purpose to protect our people, data, operations and facilities from harm. In this role, you’ll directly contribute to safeguarding the energy industry’s resilience, ensuring consumers are supported and protected.

Read on and find out more.

Job Description

Key Responsibilities

The Lead Security Engineer will play a critical part in ensuing the security of Ofgem. You will be part of small team of Security Engineers and Analysts, providing advice and guidance, and ensuring the effective use of security tools, infrastructure and capabilities.

• Support the ongoing day-to-day activity of Security Operations and the wider Ofgem Security team.
• Develop, deploy and maintain enterprise security tools – including vulnerability scanning, endpoint protection, email security controls, and logging and monitoring solutions.
• Identify and define system security requirements and develop technical solutions and new security tools to help mitigate security vulnerabilities and automate repeatable tasks.
• Work with our Azure and Office 365 Engineers in the design, development and enablement of automated monitoring processes.

Key Outputs and Deliverables

• Proactively resolve technical problems, ensuring that security solutions continue to meet business requirements taking accountability for actions taken and decisions made.
• You will investigate faults in systems, processes and services, and advise on the implementation of appropriate solutions and preventative measures.
• You will work collaboratively to ensure that a set of IT products, suppliers and vendors come together to deliver an IT service.
• You will update and maintain technical documentation relating to security solutions and controls.
• Input into regular security control dashboard reporting.

Person specification

Essential Criteria

• Hands on experience configuring and managing security systems – firewalls, intrusion detection systems, endpoint protection software, identity management, log management, vulnerability management, etc. (Lead criteria)
• Experience in a Security Operations role.
• Subject matter expert in the management and security of Microsoft operating systems.
• Experience with secure configuration of SaaS services and cloud environments, particularly M365 and Azure.
• Thorough understanding of the latest security principles, techniques, and protocols.

Desirable Criteria

• Sound awareness of the threat environment faced by government, regulatory departments and the energy industry.
• Experience of engaging with 3rd parties within service management.

Behaviours

We'll assess you against these behaviours during the selection process:

• Making Effective Decisions
• Working Together
• Managing a Quality Service

Technical Skills

We'll assess you against these technical skills during the selection process:

• Please refer to the Candidate Pack and Role Profile attached for full details.

Benefits

Alongside your salary of £47,895, OFGEM contributes £13,875 towards you being a member of the Civil Service Defined Benefit Pension scheme. Find out what benefits a Civil Service Pension provides.

Ofgem can offer you a comprehensive and competitive benefits package which includes; 30 days annual leave after 2 years; Excellent training and development opportunities; The opportunity to join the generous Civil Service pension which also includes a valuable range of benefits; Hybrid working (currently 1 day a week in the office but is in review), flexible working hours and family friendly policies. Plus lots of other benefits including clean and bright offices based centrally, engaged networks and teams and an opportunity to contribute to our ambitious and important targets of establishing a Net Zero energy system by 2050. This exciting blend of professional challenge and personal reward identifies career opportunities at Ofgem as something to get excited about.