Security Engineer

Join our client’s team as a proactive Security Engineer! This hands-on role is perfect for someone who thrives in evolving environments and is ready to boost the cyber security posture within a new Strategic Infrastructure Microsoft environment. Your key responsibilities will include:

• Implementing, configuring, and maintaining security controls across various Microsoft security technologies such as Microsoft Intune, Entra ID, Microsoft 365, Azure, and Microsoft Purview.
• Managing and enhancing identity and access management, along with data protection controls.
• Configuring Conditional Access, RBAC, Privileged Identity Management, and compliance controls.
• Identifying security gaps and executing remediation activities in line with security standards.
• Leading preparation activities for upcoming penetration testing engagements.
• Reviewing penetration testing findings and translating them into actionable remediation plans.
• Supporting security assurance, risk assessments, and control validation activities.
• Collaborating with Security Architecture and Cyber Security Incident Response teams to elevate the overall security posture.
• Assisting with audit, compliance, and evidence-gathering activities when required.

• A strong security engineering background, with hands-on technical experience.
• Proven experience in Microsoft Intune, Entra ID (Azure AD), Microsoft 365 Security, Azure Security, and Microsoft Purview.
• A solid understanding of CIS-based security controls and experience remediating penetration testing findings.
• Knowledge in Identity & Access Management, least privilege principles, and RBAC.
• The ability to work independently with minimal supervision in greenfield or early-stage environments.
• Strong stakeholder management and communication skills.

Ideal Background: You’ll excel in this role if you have:

• Experience preparing environments for external penetration testing engagements.
• The ability to recognise common vulnerabilities and security gaps.
• Familiarity with regulated or Critical National Infrastructure (CNI) environments.
• Exposure to incident response and CSIRT functions.
• Relevant Microsoft or security certifications (e.g., SC-200, SC-300, SC-400, AZ-500, CCSP).

What We’re Looking For: This role is designed for a proactive Security Engineer who enjoys a hands-on approach rather than purely advisory tasks. If you thrive in maturing environments and can autonomously drive remediation activities, we want to hear from you! Your experience in preparing organisations for penetration testing and enhancing security posture will be invaluable to our client.

Pontoon is an employment consultancy. We put expertise, energy, and enthusiasm into improving everyone’s chance of being part of the workplace. We respect and appreciate people of all ethnicities, generations, religious beliefs, sexual orientations, gender identities, and more. We do this by showcasing their talents, skills, and unique experience in an inclusive environment that helps them thrive.

We use generative AI tools to support our candidate screening process. This helps us ensure a fair, consistent, and efficient experience for all applicants. Rest assured, all final decisions are made by our hiring team, and your application will be reviewed with care and attention.