Cyber Security Officer

Cyber Security Officer Role Summary Join B&S Group as a hands-on Cyber Security Officer responsible for Security Operations, Threat Detection, Vulnerability Management, Penetration Testing and Incident Response across enterprise infrastructure, cloud services, business applications and manufacturing environments. The role works closely with Infrastructure, Development and QA teams to strengthen the organization's cyber resilience. Key Responsibilities Operate and optimise SIEM/XDR platforms, investigating and responding to security alerts. Perform threat hunting, incident response and forensic triage. Own the vulnerability management lifecycle across servers, endpoints, network devices, cloud and applications. Conduct internal infrastructure, web application, API and wireless security assessments using industry-standard and open-source tools. Support secure-by-design reviews with Development and Infrastructure teams. Develop security playbooks, SOPs, detection rules and automation using PowerShell, Python or Bash. Support infrastructure hardening, Zero Trust initiatives and regulatory compliance (ISO 27001, NIST, GAMP 5, MHRA Annex 11). Produce security metrics, reports and remediation recommendations. Essential Skills & Experience 4 - 7 years' practical experience in Security Operations, Vulnerability Management or Incident Response. Hands-on experience with SIEM, EDR/XDR, threat hunting and security monitoring. Experience with Windows, Linux, Active Directory, networking and cloud security (Azure preferred). Practical penetration testing and vulnerability assessment experience. Knowledge of OWASP Top 10, secure-by-design principles and application security. PowerShell, Python or Bash scripting for automation. Strong analytical, communication and stakeholder management skills. Preferred Experience & Technologies Pharmaceutical, healthcare or regulated industries. GxP, GAMP 5, MHRA Annex 11 or ISO 27001 environments. Wazuh, ThreatSpike, Microsoft Defender, Zabbix, Fortinet. Burp Suite, OWASP ZAP, Nmap, OpenVAS/Greenbone, Wireshark, Metasploit. Manufacturing / Operational Technology (OT) security. Preferred Certifications CompTIA CySA+ Microsoft SC-200 CompTIA Security+ eJPT or PNPT Fortinet Certified Professional/Associate OSCP or CEH (desirable) Practical experience and continuous learning (TryHackMe, Hack The Box, home lab, GitHub) valued above certifications. Success Measures Reduction in critical vulnerabilities and improved remediation SLA. Reduced MTTD and MTTR for security incidents. Improved detection quality with fewer false positives. Delivery of security playbooks, automation and hardening initiatives. Successful support of audits and regulatory compliance.