Senior Cyber Engineer

Since 2004, we’ve been bringing investment ideas to life and connecting capital with the right people and opportunities. Today, we manage more than £2.5 billion for a broad range of investors across five key investment strategies: Private Credit, Social Housing, Clean Heat, Energy and Venture. These strategies underpin the innovative range of investments we offer to both private (retail) and institutional clients.

There are 230+ employees at Triple Point, all committed to leaving the world demonstrably better than we found it. That’s why we’re a certified B Corp, signed up to the Principles for Responsible Investment, and were named a Sunday Times 'Best Place to Work 2025'.

If this sounds like an environment where you would flourish, then read on…

The Function & Team

The Technical Operations & Cyber team safeguards Triple Point’s infrastructure and ensures our technology runs smoothly, securely and reliably. The team supports colleagues with day-to-day IT needs while maintaining robust systems and cyber resilience to keep customers' data & operations safe and effective. The team sits within the wider Digital & Tech team.

The Role

We are seeking a Senior Cyber Engineer to lead project-based security engineering work, with a focus on securing identity, devices and cloud platforms.

You will serve as Triple Point’s specialist in identity, access, and cloud security controls, supporting the secure operation and working predominantly within our Microsoft 365, Azure, and Salesforce environments. Working closely with the Head of Technology Operations & Cyber, internal stakeholders, our IT MSP, and our SOC, you will ensure our environment is secure, resilient, and well-governed.

This is a hands-on, delivery-focused role owning security engineering projects end-to-end from design and planning through to implementation, documentation and transition into BAU.

Key Responsibilities

• Security Engineering (Identity, Device & Cloud)
• Define, implement, maintain and enhance security baselines for:
• Identity and access management
• Microsoft 365 services (email, collaboration, file sharing)
• MDM / Intune device management (enrolment, compliance, baselines, app protection, conditional access enforcement)

2. Detection, Response & Assurance

• Enhance identity and access logs and signals within detection and response tooling.
• Tune identity-related alerts in partnership with SOC analysts.
• Support investigations into identity-related security incidents and lead root-cause analysis.
• Contribute to internal/external audits, penetration tests and regulatory reviews relating to identity, access or cloud security.

3. Governance, Documentation & Ways of Working

• Support assurance activities, including internal/external audits, penetration tests and regulatory reviews relating to identity, access and cloud security.

Skills & Experience

Essential

• Strong understanding and extensive experience of Microsoft 365 security capabilities, Azure cloud security concepts and Zero Trust principles.
• Significant hands-on experience administering and securing identity and access management platforms in a complex enterprise environment.
• Can demonstrate strong working knowledge of adaptive access and MFA, RBAC and least privilege, Privileged Access Management, Data Loss Prevention, Identity Governance & access reviews, application onboarding and modern authentication (SAML/OAuth/OIDC).
• Proven experience delivering end-to-end security or platform engineering projects in cloud environments.
• Ability to translate regulatory and security requirements into pragmatic technical controls.
• Excellent communication skills across technical and non-technical stakeholders.

Desirable

• Experience with Infrastructure-as-Code and automation, e.g., Bicep, ARM, Terraform, PowerShell.
• Experience in a regulated financial services environment, ideally FCA-regulated (not essential)
• Experience implementing Salesforce security enhancements (e.g. Salesforce Shield).

Qualifications

Essential

• Relevant certifications such as Identity & Access Administrator (e.g., SC-300 equivalent) and Cloud Security Engineer (e.g., AZ-500 equivalent), or equivalent hands-on experience.
• Strong grounding in cyber security principles through training, qualifications or demonstrable experience.

Desirable

• Industry certifications such as CISSP, CCSP, SSCP or similar.

Why Join us?

• You’ll join a talented, collaborative team in a connected environment where ideas and initiative are valued.
• We offer a competitive salary, a comprehensive benefits package, and genuine opportunities for growth and progression.
• Opportunities for professional development and career progression.