Security Tooling Engineer

At M&G, our purpose is to give everyone real confidence to put their money to work. With a heritage dating back more than 175 years, we have a long history of innovation in savings and investments, combining asset management and insurance expertise to offer a wide range of solutions.

Our two distinct operating segments, Asset Management and Life, work together to provide access to balanced, long-term investment and savings solutions.

Through telling it like it is, owning it now and moving it forward together with care and integrity; we are creating an exceptional place to work for exceptional talent.

We will consider flexible working arrangements for any of our roles and offer workplace adjustments to ensure you have the support you need to succeed in your role.

The Security Tooling Engineer plays a key role in maintaining and evolving the organisation's security monitoring and endpoint protection capabilities. This role is responsible for providing subject matter expertise across Microsoft security technologies, with a particular focus on Microsoft Defender for Endpoint, while supporting the wider Security Operations Engineering function.

• Act as a subject matter expert for Microsoft Defender for Endpoint, ensuring the platform remains healthy, effective and aligned to evolving security requirements.
• Develop, maintain and continuously improve Microsoft Defender and Microsoft Sentinel capabilities, including monitoring coverage, automation opportunities and operational effectiveness.
• Support the onboarding of new applications, services and technology platforms, ensuring appropriate security monitoring and detection coverage is implemented.
• Help ensure Security Operations Engineering services continue to meet agreed KPIs, KRIs and operational standards.
• Additional Responsibilities
• Support the exploration, development and deployment of AI-driven use cases within the Security Operations function.
• Collaborate with technology teams, project teams and business stakeholders to embed security operations requirements into new and existing solutions.
• Maintain and enhance security log collection and ingestion capabilities, including support for Logstash and associated integrations.
• Support internal and external audits, control testing activities and assurance reviews.
• Participate in incident response, investigations and operational support activities as required.
• Mentor and support more junior members of the team, sharing knowledge and promoting best practices across security operations and engineering disciplines.

• Experience deploying, configuring and managing Microsoft security technologies, particularly Microsoft Defender for Endpoint.
• Experience working with Microsoft Sentinel in an engineering environment.
• Experience working within Azure cloud environments and supporting cloud security controls.
• Experience working with log management, data ingestion and integration technologies.
• Experience supporting audit, assurance or control testing activities.
• Experience collaborating with a broad range of technical and non-technical stakeholders.
• Experience with Infrastructure as Code (IaC) approaches and tooling is highly desirable.
• Stakeholder management skills.
• Highly organised, excellent prioritisation and planning skills
• Strong written and verbal communication skills and ability to influence using risk‑based reasoning.
• Ability to work alone or as part of a team, whilst working on multiple items at the same time.
• Ability to translate complex technical issues into meaningful details for non‑specialist audiences.
• Passion for innovation and creating solutions that make a positive difference.
• You’re willing to take responsibility, creating better outcomes by stepping forward,…