Security Engineer - Systems Integrator

Ready to take the next step in your career?

Join a specialist technology and cyber security organisation helping ambitious businesses achieve secure transformation through Microsoft cloud, identity, mobility, connectivity, and cyber security services. The organisation works closely with its clients to adopt and embrace the right technology solutions to strengthen their security and support their growth.

The company is looking for an experienced Security Engineer to join its growing Security Operations function, with a strong focus on Microsoft Defender XDR and Microsoft Sentinel. The role covers security engineering, detection development, vulnerability management, incident response, and Microsoft 365 security, with direct client exposure. This is a primarily remote position with occasional attendance at the London or Cardiff office and offers the opportunity to take ownership of security improvements, detection capabilities, and automation across client environments.

• Design, implement and optimise security controls.
• Develop detection capabilities using KQL and Advanced Hunting.
• Build and maintain Microsoft Sentinel analytical rules.
• Deploy and manage Content Hub solutions.
• Tune Microsoft Defender and wider threat policies.
• Manage phishing simulation campaigns.
• Lead vulnerability scanning activities.
• Analyse vulnerability results and associated risks.
• Produce structured security reports and recommendations.
• Present technical findings to clients and stakeholders.
• Support client remediation and security improvement activities.
• Handle escalated Incident Response investigations.
• Support advanced security investigations from the triage team.
• Develop and improve Incident Response playbooks.
• Automate processes using Azure Logic Apps.
• Audit and uplift Microsoft 365 security environments.
• Improve Microsoft Secure Score and security controls.
• Manage Defender policies and device tagging.
• Support Exchange security configuration and hardening.
• Identify opportunities for scripting and automation.
• Work with Azure Functions and codeless playbooks where appropriate.

• Extensive Security Engineering or Senior Security Analysis experience.
• Strong Microsoft Defender XDR experience.
• Strong KQL and Advanced Hunting knowledge.
• Microsoft Sentinel experience.
• Experience with vulnerability scanning and risk analysis.
• Strong understanding of security protocols and industry standards.
• Ability to interpret vulnerability scanning results.
• Experience with Microsoft 365 security environments.
• Strong client-facing communication skills.
• Ability to communicate technical findings to non-technical stakeholders.
• Experience producing professional security reports.
• Understanding of Incident Response processes and escalations.

• Primarily remote working.
• Occasional London or Cardiff office attendance.
• Hands-on exposure to the Microsoft Security ecosystem.
• Significant client-facing technical responsibility.
• Opportunity to work across security engineering, detection, vulnerability management and Incident Response.
• Opportunity to develop automation and scripting capabilities.
• Exposure to Azure and Microsoft 365 security technologies.
• Support for professional development and relevant security certifications.

• £45,000 base salary