Security Engineer

About Cyber One

Cyber One is a pure-play Microsoft security partner dedicated to helping enterprises realise the full value of the Microsoft Security portfolio-across Defender XDR, Sentinel, Entra, Purview, Intune, Copilot for Security and more. We combine deep technical expertise with outcome-driven services that accelerate secure cloud adoption, modernise threat protection and simplify compliance.

Senior Sec Ops Engineer

Hybrid; 1 day per month reporting in London office

Full-time

As a Microsoft Certified Cyber Partner, we are looking for a talented individual to join our Microsoft Cyber Engineering Team. The ideal candidate for this position will have previous experience as a Microsoft Engineer with a strong background in products such as Defender and Sentinel, ideally within a SOC environment. Your work will involve implementing technology and supporting our customers working alongside engineers, SOC Analysts, and other members of the delivery team.

This role has strong potential for career and training development as we deliver industry leading solutions to our customers.

• Implementation and support of Microsoft security products – primarily Defender, Sentinel SIEM as well as other adjacent security suite technologies
• Designing and refining engineering standards and best practices
• Conduct periodic Microsoft tenant health check assessments, audits, and architecture reviews
• Work alongside SOC Analysts to improve security event detection capability
• Research and implement new technologies that can be used within the SOC
• Deploy automation throughout the SOC to improve the overall operational effectiveness of the SOC
• Assist with the triage and resolution of incidents alongside others
• Draft reports and customer-facing documents to a high standard
• Stay up to date with the latest cyber vulnerabilities and maintain an understanding of how Microsoft technologies can be used to protect clients
• Assist with the development of more junior members of the team where required

• Any relevant Microsoft
  
  Certifications:
  
  AZ-104, SC-200, AZ-500, AZ-305
• Solid background as a Security Engineer / SOC Engineer
• Ability to lead and design automation/scripting in SIEM Tools
• Experience with SIEM solutions such as Azure Sentinel, Splunk, McAfee, Rapid7, Log Rhythym etc
• Analysing cloud security risks and threats, performing cloud security audits and assessments, and recommending cloud security controls
• Excellent written and spoken English skills are vital for compiling high-quality reports and liaising with clients
• Ability to design and document security processes
• A strong analytical mindset with prior experience with KQL and related Microsoft Security technologies

• Cyber One Ranked #79 Globally in MSSP Alert's 2025 Top 250 MSSPs
• Work with experienced cybersecurity professionals on meaningful, high-impact engagements
• Exposure to a wide range of industries, challenges, and modern Microsoft security solutions
• A collaborative environment that values expertise, autonomy, and continuous learning
• Competitive compensation, strong benefits, and a clear path for career progression

If you're passionate about Security Engineering and want a role where your expertise genuinely makes a difference, we'd love to talk.

Let's redefine what it means to be secure. Together.