Azure Security Engineer: Defender XDR & Sentinel

CyberOne; City of Westminster; Hybrid; GBP 85,000 - 120,000; Full time

Job summary

CyberOne, a pure-play Microsoft security partner, seeks an experienced Senior Azure Security Engineer to design, implement, secure and support Microsoft security technologies across cloud, identity, endpoint, infrastructure and security monitoring platforms.

You will collaborate with Security Operations, Infrastructure, Cloud Engineering, Architecture, Identity and Application teams to strengthen security controls, improve monitoring capabilities and automate processes in a hybrid enterprise

Qualifications

• Proven Azure security engineering experience in a large enterprise.
• Hands-on experience with Azure security services across IaaS, PaaS and hybrid environments.
• Experience with Microsoft Entra ID security including CA, PIM and Identity Protection.
• Strong experience with Microsoft Sentinel and Defender XDR.
• Experience designing cloud security architecture and platform hardening.

Responsibilities

• Act as Subject Matter Expert for Azure security and Defender XDR.
• Design, implement and support security controls across Azure and Entra ID.
• Engineer and maintain Microsoft Sentinel capabilities and playbooks.
• Develop security monitoring use cases and hunting queries.
• Design secure cloud and hybrid architectures and provide guidance to projects.
• Engineer telemetry and logging solutions using Azure Monitor and Log Analytics.
• Support vulnerability remediation and security incident investigations.

Skills

Azure security

Microsoft Sentinel

Defender XDR

Identity security

KQL queries

Automation

PowerShell

Python

REST APIs

Cloud architecture

Education

Degree in IT or Cyber Security

Tools

Azure Monitor

Log Analytics

Azure Policy

Azure Arc

Job description

CyberOne, a pure-play Microsoft security partner, seeks an experienced Senior Azure Security Engineer to design, implement, secure and support Microsoft security technologies across cloud, identity, endpoint, infrastructure and security monitoring platforms.

You will collaborate with Security Operations, Infrastructure, Cloud Engineering, Architecture, Identity and Application teams to strengthen security controls, improve monitoring capabilities and automate processes in a hybrid enterprise