Data Security Engineer

We have an exciting opportunity for a Data Security Engineer to join our Cyber Engineering team, providing technical consultancy and service innovation across Microsoft-aligned cyber security offerings. The role focuses on data, identity and application security, with strong expertise in Microsoft Purview and supporting knowledge of Defender for Cloud Apps. Working with customers, teammates and service leads, you will assess security posture, identify risks and control gaps, and develop practical remediation plans aligned to business objectives.

• Design and govern secure, practical controls that help organisations manage data risk, improve visibility and deliver measurable business value.
• Provide expert guidance on Microsoft security capabilities, including Purview (information protection, data lifecycle, DLP, insider risk) and Defender for Cloud Apps, enabling effective data governance and SaaS visibility.
• Deliver security gap analysis and maturity assessments across Microsoft 365, endpoint and SaaS environments, identifying risks and defining prioritised, actionable remediation plans.
• Design and assure secure, scalable solutions aligned to customer needs, contributing to service innovation and engaging stakeholders to translate business objectives into practical, high-quality security outcomes.
• Perform security assessments and maturity reviews across Microsoft 365, endpoint and SaaS environments, identifying risks and delivering prioritised remediation roadmaps.
• Contribute to the growth and maturity of the Cyber Engineering service by producing high-quality customer deliverables and supporting pre-sales activity.
• Maintain deep expertise in emerging threats, Microsoft security capabilities and industry frameworks to ensure customers benefit from current best practice.
• Help evolve our services and drive consistency across customer environments, sharing knowledge across the team and helping shape repeatable Microsoft security offerings.

• Experienced consultant with strong Microsoft data security expertise, particularly Microsoft Purview, information protection, data loss prevention and SaaS governance, with the ability to apply these capabilities in customer environments.
• Comfortable assessing security posture, identifying control gaps and developing practical, prioritised remediation plans across Microsoft 365, endpoint and SaaS environments, aligned to customer risk and business priorities.
• Clear communicator who can translate security risks, business requirements and implementation constraints into high-quality customer deliverables, actionable outcomes and clear recommendations for technical and non-technical stakeholders.
• Commercially aware, with experience contributing to consultancy delivery, requirements gathering, pre-sales activity and Statements of Work, while supporting practical scope, effort and outcome definition.

• Proven experience with Defender for Cloud Apps for SaaS discovery, governance and risk management.
• Understanding and knowledge of security baselines and control frameworks used to support risk-based recommendations.
• Experience of phased adoption approaches for data security and application governance controls.
• Working knowledge of Azure Dev Ops or similar delivery tooling.

• SC-401 (Microsoft Information Security Administrator Associate)
• SC-400 (Microsoft Information Protection and Compliance Administrator Associate)
• MS-102 (Microsoft 365 Administrator Expert)
• SC-200 (Microsoft Security Operations Analyst Associate)

• Strong alignment with FSP values and ethos
• Commitment to teamwork, quality and mutual success
• Proactivity…