Role Overview

We’re looking for a Security Engineer to support the operation, optimisation, and continuous improvement of enterprise security platforms across a complex client environment. You’ll work closely with SOC analysts, engineers, and client teams to ensure tooling is effective, resilient, and aligned to evolving threats.

Key Responsibilities

• Maintain and optimise security platforms including SIEM (Microsoft Sentinel), Defender stack, vulnerability management, DLP, and cloud security tools
• Ensure platforms are integrated, performing effectively, and aligned to client requirements
• Support incident response by resolving platform issues, enabling telemetry, and making technical changes where required
• Deploy and tune detection rules, improving alert quality and reducing false positives
• Support automation initiatives (e.g. SOAR, LogicApps) to drive operational efficiency
• Collaborate with SOC providers and internal teams on platform performance, log ingestion, and ongoing improvements
• Maintain clear documentation and operate within change control and compliance frameworks

Skills & Experience

• Strong hands-on experience with Microsoft Sentinel, Defender, and security tooling in a SOC or managed services environment
• Experience across SIEM, EDR/XDR, vulnerability scanning, and cloud security
• Knowledge of detection engineering, log pipelines, and threat frameworks (e.g. MITRE ATT&CK)
• Scripting/automation skills (PowerShell, Python, or similar)
• Solid understanding of networking, Azure, and security architecture
• Experience working in regulated environments is advantageous

Personal Attributes

• Analytical problem solver with strong technical depth
• Collaborative and able to work across technical and non-technical teams
• Proactive, detail-oriented, and accountable for platform health
• Strong communicator with a client-focused mindset

Additional Requirements

• Eligible for UK security clearance (SC/NPPV)
• Relevant certifications (e.g. AZ-500, SC-200, Security+) desirable