Cyber Security Engineer

Overview

In this Cyber Security Engineer role you will design, implement and improve security controls and tooling across the Microsoft security estate to protect the organization. You will work closely with Technology & Data teams to ensure controls are scalable, compliant and aligned with regulatory requirements. The position focuses on automation, telemetry and proactive threat management to strengthen the company’s cyber defences. This is a hybrid, predominantly home-based role with options to spend more time in the office. A chance to make an impact by shaping security in a fast-growing insurer.

Responsibilities

• Engineer, configure and maintain security controls across Microsoft security estate (Defender XDR, Sentinel, Defender for Cloud, Entra, Purview) and integrations
• Develop and maintain security telemetry, connectors, alerting, workbooks and monitoring across cloud, identity, endpoint, email and applications
• Build and maintain security automation, orchestration and response workflows including SOAR playbooks
• Implement and maintain technical security policies, baselines and guardrails
• Collaborate with Cyber and SOC to translate threat intelligence into effective controls
• Support security controls for end users, Azure workloads, cloud services and identities
• Integrate security tooling into DevOps/value-stream delivery with automation checks
• Contribute to AI defence capabilities and runtime controls for AI agents and connected tools
• Monitor tool health, coverage and lifecycle; identify gaps and areas for automation
• Provide incident response, threat hunting, control validation and remediation support
• Perform cyber control reviews of 3rd party platforms and maintain documentation
• Assess changes to security tooling for risk and implementation needs
• Contribute to cyber metrics, reporting and regulatory compliance

Key requirements

• Experience in cyber security engineering or security platform engineering
• Hands-on with Microsoft security technologies (Defender XDR, Purview, Sentinel, Defender for Cloud, Entra security)
• Security qualification or equivalent experience (AZ-500, SC-200, SC-300, SC-100, CISSP or similar)
• Troubleshooting and analytical skills
• Ability to automate security activities via scripting, APIs, workflows or IaC
• Excellent communication and stakeholder management
• Organisational skills to manage priorities across stakeholders
• Understanding of DevOps/CI/CD in an Agile environment
• Knowledge of ISO27001, NIST, PCI-DSS

• Strong communication
• Stakeholder management
• Collaborative mindset
• Defender XDR
• Microsoft Sentinel
• Microsoft Defender for Cloud

…