Senior Security Consultant

As a Senior Security Consultant within a leading Managed Security Service Provider (MSSP) specialising in Microsoft Security Solutions, you will design, secure, and automate cloud-native security platforms with a strong SecDevOps and AI-driven approach. You will help shape the next generation of our managed security services by leveraging Microsoft security technologies, AI-powered threat detection, and emerging agentic AI capabilities.

You will apply both hands-on and strategic expertise to transform our customers security posture across Microsoft cloud and on-premises environments through modern architecture, design, deployment, and integration of Microsoft Security technologies. You will lead customer workshops, provide technical guidance to stakeholders of all levels, and support the adoption and continuous evolution of managed security services throughout the engagement lifecycle.

As a Microsoft MISA and MXDR verified partner, you will also evaluate preview features and collaborate with Microsoft product managers to influence the development of security products.

This role offers broad opportunities for growth, innovation, and development of subject matter expertise in a fast-moving and dynamic industry.

This role will Involve:

• Design, develop and evolve MSSP-managed security services to support a 24/7 Security Operations Centre.
• Implement automation-using AI and agentic frameworks-across monitoring, detection, incident response, remediation and configuration management in Microsoft Defender, Sentinel, and Azure security services.
• Build reusable deployment templates (ARM/Bicep, Terraform), secure CI/CD pipelines, and automated workflows to improve service delivery.
• Develop integration tooling using PowerShell, KQL, Logic Apps, Azure Functions, PowerApps, and Sentinel playbooks.
• Contribute to continuous improvement, innovation, and the service roadmap for cloud-native, automated, and AI-assisted security operations.
• Design Microsoft security reference architectures for public, private, and hybrid cloud environments.
• Apply Zero Trust principles and guide customers through gap analysis and implementation.
• Lead customer-facing engagements covering assessments, workshops, solution design, implementation, and optimisation.

Architect and deploy Microsoft security solutions including:

• Microsoft Sentinel (AI-driven analytics & automation)
• Microsoft Purview
• Azure-native network, identity and data security
• Act as a trusted advisor to help customers accelerate adoption, improve security maturity, and maximise value from Microsoft platforms.
• Co-lead project delivery across discovery, analysis, design, build, test and deployment phases.
• Translate complex problems into clear technical solutions and actionable recommendations.
• Support secure identity management implementations and modern access governance.
• Provide structured documentation, reporting, and actionable output for customers.
• Support account managers by providing technical expertise for bids, RFPs, proposals, and with customer service reviews to ensure correct adoption of technologies and services.
• Develop solution architectures, statements of work, and technical proposals for new and existing services.
• Clearly articulate the business value of SecDevOps, automation, AI-driven security services, and MSSP models to stakeholders.
• Guide customers on strategic security roadmaps aligned with business goals.
• Be an inspirational example to less experienced colleagues, providing mentoring and knowledge sharing across SecDevOps, AI, and Microsoft security domains.
• Contribute to platform engineering strategy, delivery methodologies, and internal security capability development.
• Stay current with emerging threats, Microsoft product evolution, AI developments, and cloud security best practices.

We are Looking for Someone With:

• Strong understanding of modern cyber security principles, threat detection, incident response, and security operations.

Proven experience designing and implementing secure architectures in Microsoft 365 and Azure including;

• Microsoft Sentinel (AI-driven analytics, playbooks, automation)
• Microsoft Purview
• Defender for Cloud, Azure-native network and data security
• Knowledge of security standards like CIS, NIST and GDPR

Strong competencies in SecDevOps practices:

• CI/CD pipeline design and security
• Infrastructure-as-Code (Terraform, Bicep, ARM)
• Automation tooling (PowerShell, KQL, Logic Apps, Functions, PowerApps)
• Policy-as-code and automated compliance
• Knowledge of secure development practices
• Demonstrate working in Agile environments
• Ability to understand secure API capabilities to help scope multi-vendor integrations

Experience working with AI or AI-adjacent technologies, such as:

• Copilot for Security
• AI-driven threat detection or anomaly detection systems
• Agentic AI frameworks for automation, enrichment or workflow orchestration

Understanding of AI security principles, including:

• Data protection, access controls and model governance
• Prompt security and model misuse prevention
• AI threat modelling and risk assessment
• Secure integration of AI services into enterprise architectures

Can demonstrate relevant knowledge and experience or hold some or all of the following certifications, or be willing to achieve them:

• SC-100; SC-200; SC-300; SC-401; AZ-400; AZ-500
• Experience supporting sales with technical solution design and proposal development.
• Ability to articulate the business value of SecDevOps, automation, and AI-driven security services.
• Understanding of MSSP operating models, managed detection and response, and AI-augmented SOC capabilities.
• Degree level qualification or equivalent
• Good stakeholder management and interpersonal skills
• Ability to manage priorities and multi-task
• Ability to apply structured thinking, simplifying complex problems into component parts, to the resolution of project challenges
• Workshop skill for conveying information to customers, lead meetings and provide actionable writeups of tasks / actions.
• Ability to consistently deliver quality within expected timeframes and on budget

Working Hours: Normal working hours are 7.5 hours a day - Monday - Friday.

Working Location: ITC Secure is operating a hybrid working model, with the option to access our London, Canary Wharf office when needed.

Travel: Occasional travel to customer site when necessary.

• 25 days annual leave.
• Private health insurance.
• Enhanced maternity and paternity leave.
• Death-in-service life cover.
• Cycle to work scheme.
• Season ticket/gym loans.
• Free tea and coffee.
• And more!