Cyber Security Engineer / Cyber tooling SME

Welcome to Haleon. We’re a purpose-driven, world-class consumer company putting everyday health in the hands of millions. In just three years since our launch, we’ve grown, evolved and are now entering an exciting new chapter – one filled with bold ambitions and enormous opportunity.

Our trusted portfolio of brands – including Sensodyne®, Panadol®, Advil®, Voltaren®, Theraflu®, Otrivin®, and Centrum® – lead in resilient and growing categories. What sets us apart is our unique blend of deep human understanding and trusted science.

Now it’s time to fully realise the full potential of our business and our people. We do this through our Win as One strategy. It puts our purpose – to deliver better everyday health with humanity – at the heart of everything we do. It unites us, inspires us, and challenges us to be better every day, driven by our agile, performance-focused culture.

Role Overview

The Cyber Tooling SME Engineer is a technical engineering role responsible for the expert design, implementation, optimization, and ongoing support of the organization's cybersecurity tooling solutions. This position provides deep technical expertise to ensure the effective delivery, integration, and BAU operation of cybersecurity tools and platforms, including Microsoft cyber tooling, EDR/XDR, SIEM, CSPM, and related security technologies.

The role reports to the Cyber Tooling Product Manager and works closely with architecture and engineering teams to translate solution designs into robust, secure, and maintainable systems.

If you’re passionate about building and optimizing modern cybersecurity tooling in a complex enterprise environment and want to have a real impact on organizational security at scale, we’d love to hear from you!

Why Haleon?

None of us should ever feel like we’re standing still. At Haleon, we want you to feel supported, valued, and always progressing. Improving everyday health takes dedication, energy, and effort — so we reward your contribution with a benefits package that includes:

• Contract of employment
• Annual bonus that reflects performance
• Hybrid@Haleon our philosophy to hybrid work (2 days onsite per week)
• Private medical package (Medicover) with additional preventive healthcare services for employees and their eligible
• Multisport card or points on the Multicafeteria Benefits account
• Health and wellbeing programmes that take care of you physically and mentally
• Pension plan membership and savings programme (PPE)
• Personalized learning paths and access to diverse development tools to support your professional growth.
• Generali Life insurance
• Supportive community and integration events
• Family benefits (extra parental leave, caregiver’s policy)
• Free car and bike parking

• Bachelor’s degree or equivalent relevant work experience
• 5 years in IT, with at least 3 years of hands-on engineering experience in cybersecurity tooling
• Required certifications: CISSP or CISM (or equivalent)
• Expert-level technical knowledge of Microsoft cyber tooling, EDR/XDR, SIEM, CSPM, and related security platforms
• Engineering and implementation skills, including configuration, integration, scripting, and troubleshooting
• Problem-solving and analytical abilities with a focus on operational stability and security
• Ability to translate solution designs into practical, maintainable engineering deliverables
• Stakeholder management and communication skills
• Proven mentoring and knowledge-sharing capabilities
• Sound understanding of how cybersecurity tooling supports overall risk reduction and security operations
• Up-to-date knowledge of current and emerging cyber threats and defensive tooling technologies

Preferred:

• Master’s degree or equivalent relevant work experience
• 8+ years in IT, with at least 5 years of specialised experience in Microsoft cyber tooling, EDR/XDR, SIEM, CSPM, or enterprise security tooling platforms
• Deep hands-on expertise with Microsoft Defender suite, Microsoft Sentinel, Purview, EDR/XDR platforms, SIEM solutions, CSPM tools, and related security technologies
• Experience in tooling integration, automation, orchestration (including SOAR), and large-scale deployments in hybrid or multi-cloud environments
• Proven track record in implementing and supporting complex cybersecurity tooling solutions
• Experience with scripting and automation (PowerShell, Python, REST APIs, etc.)
• Knowledge of relevant regulations and standards (e.g., GDPR, NIS Regulations, ISO 27001)