Security Engineer – Cloud Prem; Hybrid Security

If you love beauty, you’re in the right place.

As the ultimate curator of over 100 of the most in-demand, highly innovative and boundary-pushing beauty brands, we are the go-to destination for worldwide beauty discovery.

Together through our neighbourhood stores, online presence and loyalty scheme, Space NK has built a flourishing community in which to discover beauty. The customer is at the heart of everything we do, and we will always endeavour to offer everything they need to help them explore, experiment, and enjoy our brands.

• Location:
  
  London Head Office/Hybrid
• Duration:
  Permanent
• Department:
  Technology
• Reporting to:
  Platform Engineering Principal

Space NK operates a hybrid technology environment spanning Microsoft Azure, Microsoft 365, corporate infrastructure, distribution environments and a nationwide retail estate. The Security Engineer helps protect, monitor and continually improve security across our cloud and on-premises estate.

This is a hands-on engineering role for someone with a sound foundation in cyber security and Microsoft technologies who wants to build deeper capability across Azure security, Microsoft Defender, Sentinel, identity security, vulnerability management and incident response.

Working within Platform Engineering, you will collaborate with Cyber Security, Infrastructure, Cloud, Network, Application, Service and Operations teams to investigate security events, implement agreed controls, remediate vulnerabilities and support security improvement and transformation initiatives.

The role offers clear scope to develop expertise in cloud security, threat detection, security automation and incident response, with increasing technical ownership as your experience grows.

• Administer and support security controls across Microsoft Azure, Microsoft 365 and on-premises infrastructure.
• Support the implementation and maintenance of Microsoft Defender for Cloud, including security recommendations, posture management and workload protection.
• Assist with security controls across Azure services including Key Vault, Azure Firewall, Private Link, Network Security Groups and Azure Policy.
• Review cloud security configurations and identify misconfigurations, excessive permissions and potential security weaknesses.
• Support the implementation of security baselines, hardening standards and Zero Trust principles across cloud and on-premises environments.
• Work with Infrastructure, Network and Cloud teams to remediate identified security risks.
• Support security reviews for new and existing infrastructure services.

• Monitor and investigate security alerts using Microsoft Sentinel, Microsoft Defender XDR and associated security platforms.
• Analyse security events across identity, endpoint, server, network and cloud environments.
• Investigate suspicious activity and determine the scope, impact and appropriate next actions.
• Review logs and telemetry from Entra , Azure, Microsoft 365, endpoints, firewalls and other infrastructure platforms.
• Support the development and tuning of Sentinel analytics rules, alerts, dashboards and detection logic.
• Perform proactive security analysis and threat-hunting activities using available security telemetry.
• Work directly with our SOC/MSSP and security partners to investigate alerts and coordinate technical actions.

• Investigate security incidents and support containment, remediation and recovery activities.
• Gather and analyse relevant logs, endpoint information, identity activity and other technical evidence.
• Carry out approved containment actions such as isolating endpoints, disabling accounts,…