Cyber Security Engineer: Microsoft Security & Automation

First Central Services UK Ltd; Manchester; Hybrid; GBP 65,000 - 90,000; Full time

Job summary

1st Central is seeking a Cyber Security Engineer to implement and operate security controls across Microsoft security estate, cloud and identity platforms. You will translate threats into technical protections, drive telemetry and automation, and work with SOC teams to strengthen defence.

The role offers a flexible hybrid pattern with one day in offices in Salford Quays, Haywards Heath or Guernsey, and strong collaboration across Technology & Data to keep customers safe.

Qualifications

• Practical cyber security engineering experience.
• Hands-on with Microsoft security technologies.
• Qualified or equivalent practical security experience.
• Strong troubleshooting and analytical skills.
• Clear communication with stakeholders.
• Good organisational skills across multiple teams.

Responsibilities

• Engineer, configure and maintain cyber security controls across the Microsoft security estate.
• Develop and maintain security telemetry, data connectors and monitoring coverage.
• Build and maintain security automation, SOAR playbooks and containment actions.
• Implement and maintain technical security policies and guardrails.
• Collaborate with SOC to translate threat intel into controls.
• Support end-user and cloud security improvements across Azure services.
• Integrate security into DevOps and value-stream delivery.

Skills

Cyber security engineering

Microsoft security technologies

Technical security expertise

Troubleshooting & analysis

Communication & stakeholder management

Organisation & prioritisation

Education

AZ-500

SC-200

SC-300

SC-100

CISSP or similar

Tools

Microsoft Defender XDR

Microsoft Sentinel

Microsoft Defender for Cloud

Entra

Microsoft Purview

Job description

1st Central is seeking a Cyber Security Engineer to implement and operate security controls across Microsoft security estate, cloud and identity platforms. You will translate threats into technical protections, drive telemetry and automation, and work with SOC teams to strengthen defence.

The role offers a flexible hybrid pattern with one day in offices in Salford Quays, Haywards Heath or Guernsey, and strong collaboration across Technology & Data to keep customers safe.