Microsoft Defender Security Engineer

• Take on a new challenge and use your specialist knowledge to support the wider organisation in building and operating secure services that protect both colleagues and customers
• You’ll act as a subject matter expert in a security related field, making sure that the security implications of the backlog are understood in the right way, building security early into design
• You’ll be joining an exciting and fast-paced area of the bank, where you can expect great exposure both for you and your work
• You’ll work from home some of the time, but you’ll also spend a minimum of 1 day per week working from the Edinburgh

What you’ll do As a Microsoft Defender Security Engineer, you’ll work at a domain level to understand and ensure robust security is continuously considered and incorporated at every stage, programme increment and feature team delivery throughout the development lifecycle and through to support. You’ll collaborate with feature teams and participate in story refinement, sprint planning and retrospective sessions, establishing a culture of innovation and strategic thinking that makes sure that the bank has knowledge of, and opportunities to exploit, the latest developments in your area of specialism. You’ll also be:

• Supporting the design, deployment, and transition to BAU of Microsoft security solutions, particularly Microsoft Defender and Sentinel
• Proactively working with the vendor on the development and testing of new features and capabilities
• Supporting digital and security colleagues with Microsoft security solutions knowledge during incidents
• Proactively researching how other organisations are adopting and exploiting the capabilities of Microsoft security solutions to address security challenges and improve the effectiveness of security teams
• Supporting the ongoing backlog development and maintenance
• Actively contributing to your centre of excellence (CoE) specialism by cross sharing learnings and best practice with CoE and community of practice colleagues

To be successful in this role, you’ll need knowledge of one or more security subject areas and experience of setting risk appetites. You’ll also demonstrate experience of, or a willingness to learn risk management frameworks. Additionally, you’ll need:

• Experience implementing or supporting, in an engineering capacity, two or more Microsoft Security products from the following list, Microsoft Defender for Endpoint, Microsoft Defender for Identity, Microsoft Defender for Cloud Apps, Microsoft Defender for Office 365 and Microsoft Sentinel.
• Experience working with Microsoft Azure is highly desirable, particularly Azure Logic Apps and Infrastructure as Code (IaC)
• A proactive learner who is curious, adaptable, and constantly seeks opportunities to enhance performance and effectiveness
• Strong analytical and problem-solving skills, with the ability to investigate, troubleshoot, and resolve complex technical challenges
• Excellent communication skills, with the ability to explain complex technical concepts clearly to both technical and non-technical colleagues
• Microsoft security certifications, such as SC-200 and SC-900, are desirable