Cyber Security Engineer

Specialist-Risk-Group; Greater London; On-site; GBP 85,000 - 110,000; Full time

Benefits offered by this job

25 days holiday + birthday half-day

Private medical cover

Life insurance

Income protection

Charity and volunteering days

Job summary

Specialist Risk Group (SRG) is seeking a Lead Infrastructure Security Engineer to design, implement and continuously improve security controls across SRG’s Microsoft technology estate. This role emphasizes security engineering, automation and governance with a focus on scalability and resilience.

You’ll work across Entra ID, Defender, Sentinel and Purview, drive Zero Trust initiatives and help onboard newly acquired businesses while delivering practical, robust security solutions.

Qualifications

• Experience in Cyber Security Engineering, Infrastructure Security or Cloud Security.
• Exposure to Microsoft Defender XDR, Microsoft Sentinel and KQL.
• Knowledge of Entra ID, including Conditional Access, PIM and identity lifecycle controls.
• Experience with vulnerability management and security operations processes.
• Practical automation skills using PowerShell and Microsoft Graph.
• Excellent communication skills with the ability to explain technical concepts to non-technical audiences.

Responsibilities

• Designing and maintaining identity and access controls across Entra ID, including Conditional Access and Privileged Identity Management.
• Enhancing security controls across Microsoft Defender, Sentinel and Purview environments.
• Developing endpoint security standards for Windows and macOS platforms.
• Automating security processes, reporting and evidence collection using PowerShell, Microsoft Graph and related technologies.
• Supporting incident response, threat investigations and vulnerability remediation activities.
• Contributing to Zero Trust initiatives and the secure onboarding of newly acquired businesses.

Skills

Cyber Security Engineering

Infrastructure Security

Cloud Security

Automation with PowerShell

Strong communication

Tools

Entra ID

Conditional Access

PIM

Microsoft Defender XDR

Microsoft Sentinel

Microsoft Purview

PowerShell

Microsoft Graph

KQL

Job description

At Specialist Risk Group (SRG), we specialise in delivering expert risk solutions for complex, high-stakes challenges across a range of sectors. From professional indemnity insurance to bespoke risk management services, our work demonstrates both precision and adaptability, reflecting our commitment to helping clients navigate even the most demanding scenarios.

Our dedication to excellence and innovative thinking underpins everything we do. Guided by our mantra, “Difficult. Done Well.”, we tackle challenges that others shy away from, delivering solutions that are both robust and forward-thinking.

Powered by a team of highly skilled specialists, we combine deep industry knowledge with strategic insight to turn complex problems into practical, actionable solutions. We work closely with our clients, understanding their ambitions and risks, to provide tailored strategies that support growth, resilience, and long-term success.

With a focus on collaboration, expertise, and precision, SRG shapes the way organisations manage risk—transforming complexity into opportunity and helping clients achieve outcomes they can rely on.

About the role

Reporting to the Lead Infrastructure Security Engineer, you’ll design, implement and continuously improve security controls across SRG’s Microsoft technology estate. This role combines security engineering, automation and technical governance, with a strong focus on scalability, resilience and continuous improvement.

What you’ll be doing

• Designing and maintaining identity and access controls across Entra ID, including Conditional Access and Privileged Identity Management.
• Enhancing security controls across Microsoft Defender, Sentinel and Purview environments.
• Developing endpoint security standards for Windows and macOS platforms.
• Automating security processes, reporting and evidence collection using PowerShell, Microsoft Graph and related technologies.
• Supporting incident response, threat investigations and vulnerability remediation activities.
• Contributing to Zero Trust initiatives and the secure onboarding of newly acquired businesses.

Who we’re looking for

You’ll bring strong technical security engineering experience and enjoy finding smarter, more effective ways to solve complex challenges.

• Experience in Cyber Security Engineering, Infrastructure Security or Cloud Security.
• Exposure to Microsoft Defender XDR, Microsoft Sentinel and KQL.
• Knowledge of Entra ID, including Conditional Access, PIM and identity lifecycle controls.
• Experience with vulnerability management and security operations processes.
• Practical automation skills using PowerShell and Microsoft Graph.
• Excellent communication skills with the ability to explain technical concepts to non-technical audiences.

What you’ll get

When you join SRG, you’re stepping into more than just a role, you’re becoming part of a team that backs your ambitions and celebrates your success. We’ll give you the space, support, and opportunities to grow your skills, explore new challenges, and shape a career you’re proud of.

And because we believe great work should be rewarded, here’s what you can look forward to:

• From 25 days holiday plus an extra half-day off to celebrate your birthday month
• secure your future
• Private medical cover for peace of mind
• Life insurance, income protection and sick pay to support you when you need it
• Charity and volunteering days so you can give back to causes you care about

What to expect

At SRG, our colleagues are at the heart of everything we do. We pride ourselves on fostering an inclusive, respectful culture, one where people feel empowered, valued, and equipped for growth. We embrace new ideas, adapt to challenges, and celebrate shared success.

We’re committed to making our recruitment process and workplace accessible to everyone. If you have a disability or require any adjustments, whether during the hiring process or in your day-to-day role, we’ll work with you to ensure you have the support you need. Just let us know how we can help.