> Markdown version of [/jobs/ext/2409242-security-engineer](https://www.wearedevelopers.com/jobs/ext/2409242-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Security Engineer - **Company:** Kocho - **Location:** Cardiff, UK (Remote available) - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Microsoft Azure, Business Process Modeling, Cyber Security, Github, Intrusion Detection and Prevention, JSON, Jinja (Template Engine), Python (Programming Language), Microsoft Security Essentials, Phishing, Kusto Query Language, YAML, Microsoft Power Automate, Information Technology, Cybercrime, Bicep, Microsoft Sentinel, Serverless Computing, Vulnerability Analysis - **Published:** August 26, 2026 - **Apply:** https://uk.indeed.com/viewjob?jk=0950bd67d38fb313 ## About the Role * A degree in Computer Science, Cyber Security or a related field or equivalent and demonstrable experience * Extensive experience in Security Engineering or Senior Security Analysis * Strong knowledge of security protocols and industry standards * Experience with vulnerability testing and risk analysis * SME in Microsoft Defender XDR * Strong proven knowledge of KQL & Advanced Hunting * Experience using common vulnerability scanning tools and interpreting their results * Strong client-facing skills, including the ability to translate technical findings into clear, actionable recommendations. You will regularly prepare well-structured reports, present security insights to both technical and non-technical stakeholders, and provide guidance that helps clients strengthen their security posture. Would be great if you have: * Proficiency in certain languages, standards and assemblies/tools such as Python, Bicep, ARM, JSON, YAML * Familiarity with Jinja2, Codeless Playbooks, Azure Functions, Azure Logic Apps * Professional certifications such as AZ-500, SC-100, SC-200, CISSP, CEH, CYSA+ * GitHub Portfolio of solutions you've built ## Description As a Security Engineer, you will play a critical role in safeguarding our organisation, clients, and partners from cyber threats. You will apply your experience in Security Engineering or as a Senior Security Analyst to design, implement, and optimise security measures that protect systems, networks, and data from unauthorised access, attacks, and breaches. Working closely within the Security Operations team and directly with clients, you will ensure that security controls remain effective, aligned to best practice, and continuously improved. This role is primarily remote but you may be asked to come into the Cardiff or London Office at your manager's discretion, we would expect a successful candidate to always attend when required. We anticipate this to be a couple times a month. In this role, you will deliver hands-on expertise across the Microsoft Security Stack, particularly Microsoft Defender XDR and Microsoft Sentinel. You will build, maintain, and enhance detection capabilities by deploying KQL analytical rules, developing Content Hub solutions, and tuning threat policies to ensure strong protection and high-quality signal. Your responsibilities will include managing phishing simulation campaigns, leading vulnerability scans, and producing accurate, well-structured reports with clear, actionable recommendations. You will regularly engage with clients, presenting findings and guiding them through remediation activities alongside a Cyber Security Project Manager. You will also provide Incident Response support by handling escalations from the triage team, performing advanced investigations, and contributing to playbook automation using Azure Logic Apps to streamline processes and improve response consistency. Your Incident Response involvement is only from an Escalation Standpoint and you are not expected to regularly be involved in Analyst related activities. Additionally, you will audit and uplift client environments across the Microsoft 365 Security Suite, focusing on areas such as Secure Score improvements, Device Tagging, Defender policy management, Exchange configuration hardening, and other lifecycle-related security tasks. Where applicable, you may also leverage scripting or automation skills (e.g., Python, Bicep, ARM, JSON, YAML) and contribute to Logic Apps, Azure Functions, or codeless playbooks to further enhance operational efficiencies. This is what we need from you ## Related Videos - [Back(end) to the Future: Embracing the continuous Evolution of Infrastructure and Code](https://www.wearedevelopers.com/videos/440-back-end-to-the-future-embracing-the-continuous-evolution-of-infrastructure-and-code) - [Tips and Tricks for Working with JSON](https://www.wearedevelopers.com/videos/1229-tips-and-tricks-for-working-with-json) - [CI/CD with Github Actions](https://www.wearedevelopers.com/videos/856-ci-cd-with-github-actions) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Introducing JSON Structure](https://www.wearedevelopers.com/videos/100219-introducing-json-structure) - [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [The 12 Best Jobs for Software Engineers](https://www.wearedevelopers.com/magazine/401-the-12-best-jobs-for-software-engineers) - [Dev Digest 138 - Are you secure about this?](https://www.wearedevelopers.com/magazine/486-dev-digest-138-are-you-secure-about-this)