Security Engineer

• Build strong relationships with clients and act as a trusted technical point of contact
• Support client calls and clearly explain technical issues and recommendations
• Assess incoming technical requests to ensure they are appropriate, in scope and aligned with best practice
• Configure and tune Microsoft security controls, including Defender policies, Entra settings and Exchange Online security
• Build and maintain detection capabilities using KQL, Advanced Hunting and Microsoft Sentinel
• Manage phishing simulation campaigns and support vulnerability scanning
• Review client environments and identify opportunities to improve their Microsoft 365 security posture
• Support incident response activities and security investigations
• Produce clear technical reports, recommendations and documentation
• Work with senior engineers to triage and escalate complex technical issues
• Where applicable, use scripting and automation to improve processes and efficiency

Technologies:

• ARM
• Azure
• Cloud
• Support
• JSON
• Microsoft 365
• Python
• Security
• Office 365

• Experience in a security or technical environment, such as SOC, Security Engineering, IT Support or Technical Delivery
• Working knowledge of Microsoft security technologies, particularly Defender XDR, Entra, Defender for Cloud Apps and Exchange Online
• Strong knowledge of KQL and Advanced Hunting
• Experience with Microsoft Sentinel, including analytics rules and Content Hub solutions
• Good understanding of security protocols, standards and best practices
• Knowledge of vulnerability management and risk analysis
• Strong technical judgement and the ability to recognise when an issue needs to be escalated
• Excellent communication skills, including the ability to explain technical information to technical and non-technical audiences
• Strong written skills and experience producing technical documentation or reports
• A proactive, curious approach and a genuine desire to continue developing technical skills
• A degree in Computer Science, Cyber Security or a related subject is beneficial; equivalent professional experience will also be considered
• Experience with Python, Bicep, ARM, JSON or YAML, Azure Logic Apps, Azure Functions, codeless playbooks, Jinja2, or Microsoft certifications such as SC-200, SC-300, SC-401, MS-102 or AZ-500 would be beneficial

We are recruiting a Security Engineer for our growing Cyber Security Delivery Team, working with a leading Microsoft-focused security partner. This Cardiff-based role offers hybrid working and a salary of up to £45,000. You will work closely with our Delivery and Engineering teams across client environments, using technologies including Microsoft Defender XDR, Microsoft Entra, Defender for Cloud Apps, Exchange Online and Microsoft Sentinel. We welcome someone interested in cyber security who enjoys working with clients and developing expertise across the Microsoft security stack. We are recruiting through CPS Group, acting as an employment agency for this vacancy.