Cyber Security Engineer

We’re supporting a well-established organisation as they continue to strengthen their cyber resilience capabilities across a complex Microsoft-centric technology estate.

This is a hands-on engineering role for someone who enjoys building, improving and securing modern enterprise environments. You’ll play a key part in enhancing security controls, improving identity and access management, strengthening cloud security and reducing organisational risk through proactive security engineering.

This is not a traditional SOC position. Whilst you’ll contribute to threat detection and incident response activities, the focus of the role is designing, implementing and continuously improving security controls across Microsoft technologies and cloud platforms.

What You’ll Do

• Enhance and optimise Microsoft Defender and Microsoft Sentinel capabilities across the estate
• Design and implement security controls within Azure environments
• Lead improvements across Entra ID security, Conditional Access, Identity Protection and Privileged Identity Management
• Drive vulnerability management activities, remediation planning and risk reduction initiatives
• Implement and maintain data protection and information governance controls using Microsoft Purview
• Work closely with infrastructure, cloud and project teams to embed security into new and existing technology solutions
• Contribute to incident response activities and ongoing improvements to detection capabilities
• Provide technical security guidance to both technical and non-technical stakeholders
• Support compliance against recognised security frameworks including NCSC CAF, ISO27001, NIST CSF and CIS Controls

We’re particularly interested in speaking with Security Engineers who have experience implementing and improving security controls rather than purely operating security tools., * Experience in a Security Engineering, Cyber Engineering or Security Infrastructure position

• Strong hands-on knowledge of Microsoft Defender and Microsoft Sentinel
• Experience securing Azure environments in production enterprise settings
• Good understanding of Entra ID security, Conditional Access and identity governance
• Practical experience of vulnerability management and remediation programmes
• Experience working with security frameworks and technical control implementation
• The ability to influence stakeholders and articulate security risk effectively

• Up to 10% discretionary bonus
• Flexible working arrangements
• 25 days holiday plus bank holidays
• Pension contribution of up to 15%
• Life assurance
• Flexible benefits package
• Enhanced family leave policies
• Annual salary review
• Retail discounts and cashback schemes
• Company sick pay

This is an opportunity to join a growing cyber function where you’ll have genuine influence over security strategy, tooling and control maturity.

Rather than simply operating existing processes, you’ll help shape how security is delivered across the organisation, working on a broad range of cloud, identity, data protection and resilience initiatives.