Senior Cyber Security & Cloud Engineer

They’re looking for a Senior Cyber Security & Cloud Engineer to take ownership of security services and Microsoft cloud projects across their client base. This is a hands-on, client-facing role combining incident response, Microsoft 365 and Azure engineering, major migrations and security consultancy.

You’ll help shape technical standards, lead complex implementations and act as the escalation point for engineers and clients.

THE ROLE

You’ll lead managed security services covering detection and response, identity threats and SIEM, including client onboarding, detection tuning, alert triage alongside the NOC/SOC, and reporting.

Alongside this, you’ll design secure Microsoft cloud environments and deliver migrations from initial discovery through to cutover and handover.

Your responsibilities will include:

• Leading security incident investigations, containment and recovery, producing root cause reports and running twice-yearly incident response drills.
• Designing and maintaining Entra ID security, including Conditional Access, MFA, privileged access, SSO and hybrid identity.
• Securing Microsoft 365 environments across Defender XDR, Intune, Exchange Online and Purview, with measurable improvements to Secure Scores.
• Designing and delivering Azure infrastructure, including virtual machines, Azure Virtual Desktop, networking, storage, backup and disaster recovery.
• Leading Microsoft 365 tenant-to-tenant, Google Workspace to Microsoft 365, SharePoint/OneDrive and on-premises-to-Azure migrations.
• Planning migrations with minimal downtime, tested rollback procedures and secure, cost-efficient environments.
• Delivering Cyber Essentials and Cyber Essentials Plus assessments and remediation, alongside supporting the ISO 27001 information security management system.
• Conducting vulnerability assessments and security posture reviews, translating findings into prioritised remediation plans.
• Establishing security baselines across cloud platforms, firewalls, networks, servers and endpoints.
• Explaining technical risks to clients, contributing to quarterly reviews and mentoring other engineers.

• At least 5 years’ experience in IT infrastructure or cyber security, including 3 years within an MSP or similar multi-client environment.
• Strong hands-on Microsoft 365 and Entra ID expertise, particularly Conditional Access, Intune, Defender XDR and Exchange Online.
• Solid Azure experience covering IaaS, networking, Azure Virtual Desktop, backup and recovery.
• A track record of leading substantial Microsoft 365 and Azure migrations, using tools such as BitTitan MigrationWiz, ShareGate or Azure Migrate.
• Proven incident response experience and practical experience operating EDR, ITDR and SIEM platforms such as Huntress, Microsoft Defender or Sentinel.
• Strong knowledge of firewalls, networking and infrastructure security.
• A good understanding of Cyber Essentials, Cyber Essentials Plus, ISO 27001 and GDPR.
• The confidence to own technical delivery and explain security risks to non-technical stakeholders., * Microsoft certifications such as SC-200, SC-300, AZ-104, AZ-500 or MS-102.
• PowerShell and Microsoft Graph scripting.
• KQL for Microsoft Sentinel or Defender threat hunting.
• Experience supporting creative-sector platforms such as LucidLink, Nasuni or Egnyte., * Microsoft 365 & Entra ID
• Azure Infrastructure & Cloud Migrations
• Cyber Security & Incident Response
• Microsoft Defender XDR & Sentinel
• Intune & Conditional Access

• 22 days’ annual leave plus bank holidays, increasing to 25 days over your first three years.
• Funded professional development and certification costs.
• Quarterly and annual staff awards.
• Funded social events and referral bonuses.
• Hybrid working following the office attendance pattern above.