Principal Cybersecurity Engineer – Vulnerability & Endpoint Protection

About the role

Our client, a leading financial services organisation, is looking for a senior, hands‑on Principal Cybersecurity Engineer to elevate their enterprise security posture across on‑premises, cloud and hybrid environments.

Key responsibilities

• Design, implement, optimise and manage the lifecycle of security technologies, including vulnerability management (Nessus Professional) and endpoint protection (Trellix).
• Lead deployments of security solutions, coordinate remediation, and oversee platform upgrades.
• Support critical incident response and conduct thorough implementation testing.
• Collaborate with vendors and internal stakeholders, providing technical guidance to engineering teams.
• Drive security architecture for cloud services, primarily AWS, and ensure compliance with audit, risk and regulatory requirements.

Required profile

• Minimum 10 years of hands‑on security engineering experience in complex enterprise settings.
• Strong expertise in vulnerability management using Nessus Professional.
• Extensive experience with Trellix endpoint protection and exposure to EDR/XDR, SIEM, SOAR, DLP, PAM, IAM, WAF, IDS/IPS.
• At least 5 years of cloud security experience, preferably AWS, plus solid networking, system hardening, Unix/Linux and scripting skills.
• Proven ability to lead technology implementations from proof‑of‑concept to production rollout.

Required skills

• Nessus Professional
• Trellix endpoint protection
• EDR/XDR, SIEM, SOAR
• DLP, PAM, IAM, WAF, IDS/IPS
• AWS cloud security
• Unix/Linux administration
• Scripting (Bash, PowerShell)
• Network security fundamentals