Senior Azure Security Engineer

“I am hugely excited about my future and the future of Cyber One. I have enjoyed my time here immensely and have learnt a huge amount in a short space of time, year-for-year I've learnt more here than I have at Microsoft and PwC.” - Cyber One Consultant

Cyber One is a pure-play Microsoft security partner dedicated to helping enterprises realise the full value of the Microsoft Security portfolio—across Defender XDR, Sentinel, Entra, Purview, Intune, Copilot for Security and more. We combine deep technical expertise with outcome-driven services that accelerate secure cloud adoption, modernise threat protection and simplify compliance.

Senior Azure Security Engineer

Hybrid; 1 day per month reporting in London office

Full-time

We are seeking an experienced Senior Azure Security Engineer to join the Cyber Security team. The role is responsible for designing, implementing, securing and supporting Microsoft security technologies across cloud, identity, endpoint, infrastructure and security monitoring platforms.

The engineer will work closely with Security Operations, Infrastructure, Cloud Engineering, Architecture, Identity and Application teams to strengthen security controls, improve monitoring capabilities, automate security processes and support the organisation's cyber resilience. The role combines Azure security engineering, Microsoft Sentinel, Microsoft Defender, cloud security architecture, automation and operational support across a hybrid enterprise environment.

• Act as a Subject Matter Expert for Microsoft Azure security, Microsoft Sentinel, Microsoft Defender XDR and associated Microsoft security technologies.
• Design, implement and support enterprise security controls across Azure, Microsoft Entra  the Microsoft security ecosystem.
• Engineer and maintain Microsoft Sentinel capabilities, including data connectors, analytics rules, KQL queries, workbooks, watchlists, automation rules and playbooks.
• Design, implement and optimise Microsoft Defender capabilities, including Defender for Endpoint, Defender for Identity, Defender for Cloud, Defender for Office 365 and Defender XDR.
• Develop security monitoring use cases, threat detections and hunting queries aligned to business risks, threat intelligence and MITRE ATT&CK.
• Design secure cloud and hybrid architecture patterns and provide practical technical guidance to projects and engineering teams.
• Engineer telemetry and logging solutions using Azure Monitor, Log Analytics, Azure Monitor Agent, Data Collection Rules, custom tables and API-based integrations.
• Design and implement security automation using Logic Apps, Azure Functions, REST APIs, Power Shell and Python.
• Perform technical security assessments and review cloud solutions against enterprise security standards, control requirements and secure-by-design principles.
• Implement and maintain cloud security baselines, hardening standards, policy controls and configuration-management practices.
• Support vulnerability and configuration-risk remediation across Azure and Microsoft security platforms.
• Support cyber incident investigations and provide security expertise during critical incidents and major technology changes.
• Produce and maintain High-Level Designs, Low-Level Designs, engineering standards, operating procedures, support documentation and implementation records.
• Lead platform enhancements, proof-of-concepts, migrations, upgrades, troubleshooting and service-improvement activities.
• Build platform health monitoring, operational dashboards and KPI/KRI reporting for the Proactive Security function.

• Proven Azure security engineering experience within a large,…