Cyber Security Engineer

We care about your career and are known for having the absolute best people in the industry. When you join us as a Cyber Security Engineer you start a unique opportunity to become celebrated as the very best in your field. You’ll learn not only from your fellow Legends, but also through our award-winning learning academy, so that you can achieve the highest standards of craft, service, and leadership and become a legend in your own story.

The Cyber Security Engineer is a hands-on technical role responsible for shaping, driving, and continuously improving the organisation’s information and cyber security posture across on‑premises infrastructure and Microsoft Azure cloud environments. The role focuses on owning and delivering remediation from security assessments, penetration testing, and vulnerability management, while acting as the technical subject matter expert for cyber security across the business.

This position is suited to candidates with a strong infrastructure or IT system administration/support background, with proven experience securing hybrid environments and responding to real‑world threats

As a Cyber Security Engineer at Dorchester Collection here are just some of the great benefits you will receive:

• Complimentary stays with breakfast included in all 10 Dorchester Collection hotels
• 50% off at bars and restaurants within all of our Dorchester Collection hotels
• £750 Refer a friend bonus scheme
• World class development opportunities
• Social events throughout the year
• Workday Lunches in the form of a prepaid contactless card
• Season ticket loan and cycle to work scheme
• Exclusive Access to a discount platform featuring 1000s of retailers
• Subsided access to gyms, fitness classes and wellness experiences
• Competitive retirement scheme

• Cyber Security Engineering & Operations
  • Own and resolve cyber security–related support tickets, investigations, and technical issues.
  • Triaging, investigating, and responding to threats via the global XDR platform.
• Act as an escalation point for complex or high-risk security events.
  
  • Vulnerability Management & Remediation
  • Own end-to-end remediation of findings from penetration tests, vulnerability scanning, and internal assessments.
  • Work hands-on with infrastructure and regional teams to remediate vulnerabilities across servers, endpoints, networks, and cloud platforms.
  • Track and drive remediation activity to ensure timely closure of security risks.
• Security Assessments & Posture
  • Plan and execute internal security assessments and technical reviews across infrastructure and sites.
  • Identify security gaps, prioritise risk, and define pragmatic remediation plans.
  • Continuously improve technical security controls and configuration standards.
• Policy, Standards & Process
  • Establish, maintain, and improve cyber security policies, standards, and supporting processes.
  • Ensure security controls align with best practice while remaining workable in operational environments.
  • Support audits and information security reviews through clear documentation and evidence.
• Projects & Change
  • Act as a security point of contact during the design and implementation of IT and business projects.
  • Review architectures, designs, and deployments to ensure security requirements are met.
• Regional Coordination & Enablement
  • Coordinate and delegate security activities across regional IT teams.
  • Provide technical guidance to ensure consistent application of security standards globally.
  • Build effective working relationships with regional stakeholders.

The items shared are the essence of a day in the life of a Cyber Security Engineer but we’ll make sure you are provided with specifics on how we care for our company.

The hours of operation for this role are Monday to Friday 9:00am to 5:30pm, with a core requirement of on-call support outside of these working hours. We are based in our corporate office in Knightsbridge.

Essential Skills:

• You’ll bring your unique personality and passion to the role and the team
• Strong background in IT infrastructure and IT systems engineering.
• Hands-on experience remediating security vulnerabilities.
• Experience with penetration test and vulnerability management outputs.
• Strong experience securing Active Directory on premise and Azure cloud environments.
• Understanding of identity, access management, patching, and monitoring.
• English is the primary language used in our office. You can comfortably communicate in this language, both verbally and written

Desirable Skills:

• Experience supporting ISO 27001, CIS or similar security and audit frameworks.
• Security certifications such as SSCP, CISSP, GIAC, or Microsoft Security certifications.
• Hands‑on experience managing or supporting next-gen firewall (Palo Alto preferred).
• Experience working with XDR platforms, including alert triage, investigation, and response.
• Experience operating within hybrid on‑premises and cloud environments at enterprise scale.