Senior Azure Security Engineer

We’re looking for an experienced Senior Azure Security Engineer to join a cyber security team on an initial 4-month contract. This is an excellent opportunity for a hands‑on security engineer with strong Microsoft Azure security expertise, experience across Microsoft Sentinel, and a passion for strengthening enterprise cyber resilience.

You’ll play a key role in designing, implementing, securing and supporting Microsoft security technologies across cloud, identity, endpoint, infrastructure and security monitoring platforms. Working closely with Security Operations, Cloud Engineering, Infrastructure, Identity and Architecture teams, you’ll help enhance security controls, improve threat detection, automate security processes and support a complex hybrid enterprise environment.

• Act as a subject matter expert across Microsoft Azure security, Microsoft Sentinel, Microsoft Defender XDR and associated Microsoft security technologies.
• Design, implement and support enterprise security controls across Azure, Microsoft Entra  the wider Microsoft security ecosystem.
• Engineer and optimise Microsoft Sentinel, including data connectors, analytics rules, KQL queries, workbooks, watchlists, automation rules and playbooks.
• Implement and optimise Microsoft Defender capabilities, including Defender for Endpoint, Defender for Identity, Defender for Cloud and Defender for Office 365.
• Develop threat‑detection use cases, security monitoring capabilities and threat‑hunting queries aligned with business risks.
• Design secure cloud and hybrid architecture patterns, providing technical guidance to engineering and project teams.
• Develop and maintain telemetry and logging solutions using Azure Monitor, Log Analytics and API‑based integrations.
• Implement security automation using Logic Apps, Azure Functions, REST APIs, Power Shell and Python.

• Proven hands‑on Azure Security Engineering experience within a large, complex enterprise environment.
• Strong knowledge of Azure security services across IaaS, PaaS and hybrid environments.
• Practical experience with Microsoft Entra , including Conditional Access, Privileged Identity Management (PIM) and Identity Protection.
• Strong experience with Microsoft Sentinel and Microsoft Defender XDR.
• Experience configuring and managing Defender for Endpoint, Defender for Identity, Defender for Cloud and Defender for Office 365.
• Understanding of cloud and network security, including Azure Firewall, Network Security Groups, Private Endpoints and network segmentation.
• Experience working collaboratively with Security Operations, Incident Response, Cloud Engineering, Infrastructure and Architecture teams.

• Experience securing enterprise‑scale Azure landing zones.
• Knowledge of SOAR solutions, automated security‑control validation and Zero Trust principles.
• Experience with Privileged Access Management.
• Previous experience working within regulated environments, particularly financial services.
• Exposure to AWS, GCP or wider multi‑cloud environments.
• Microsoft AZ‑500 and SC‑200 certifications are strongly preferred, with SC‑100, SC‑300 or AZ‑104 also advantageous.