Data Security Engineer

FSP; Glasgow; Hybrid; GBP 70,000 - 95,000; Full time

Benefits offered by this job

Flexible working

Coaching and mentoring

Competitive salary

Job summary

FSP is seeking a Data Security Engineer to join the Cyber Engineering team in the United Kingdom. The role focuses on data, identity and application security, with strong expertise in Microsoft Purview and knowledge of Defender for Cloud Apps.

You will assess security posture, identify risks and develop remediation plans aligned to business objectives. As a consultant, you will design secure controls, provide guidance on Microsoft security capabilities and deliver remediation roadmaps while

Qualifications

• Experienced consultant with strong Microsoft data security expertise, particularly Purview, information protection and DLP.
• Ability to assess security posture, identify control gaps and develop remediation plans across Microsoft 365, endpoint and SaaS environments.
• Clear communication of risks and recommendations to technical and non-technical stakeholders.

Responsibilities

• Design and govern secure controls to manage data risk and improve visibility.
• Provide expert guidance on Microsoft security capabilities including Purview and Defender for Cloud Apps.
• Deliver security gap analyses and maturity assessments across Microsoft 365, endpoint and SaaS environments.

Skills

Microsoft Purview

Defender for Cloud Apps

Data security

Information protection

DLP

Security governance

SaaS governance

Tools

Azure DevOps

Job description

We have an exciting opportunity for a Data Security Engineer to join our Cyber Engineering team, providing technical consultancy and service innovation across Microsoft-aligned cyber security offerings. The role focuses on data, identity and application security, with strong expertise in Microsoft Purview and supporting knowledge of Defender for Cloud Apps. Working with customers, teammates and service leads, you will assess security posture, identify

risks and control gaps, and develop practical remediation plans aligned to business objectives.

Responsibilities:

• Design and govern secure, practical controls that help organisations manage data risk, improve visibility and deliver measurable business value.
• Provide expert guidance on Microsoft security capabilities, including Purview (information protection, data lifecycle, DLP, insider risk) and Defender for Cloud Apps, enabling effective data governance and SaaS visibility.
• Deliver security gap analysis and maturity assessments across Microsoft 365, endpoint and SaaS environments, identifying risks and defining prioritised, actionable remediation plans.
• Design and assure secure, scalable solutions aligned to customer needs, contributing to service innovation and engaging stakeholders to translate business objectives into practical, high-quality security outcomes.
• Perform security assessments and maturity reviews across Microsoft 365, endpoint and SaaS environments, identifying risks and delivering prioritised remediation roadmaps.
• Contribute to the growth and maturity of the Cyber Engineering service by producing high-quality customer deliverables and supporting pre-sales activity.
• Maintain deep expertise in emerging threats, Microsoft security capabilities and industry frameworks to ensure customers benefit from current best practice.
• Help evolve our services and drive consistency across customer environments, sharing knowledge across the team and helping shape repeatable Microsoft security offerings.

About you:

• Experienced consultant with strong Microsoft data security expertise, particularly Microsoft Purview, information protection, data loss prevention and SaaS governance, with the ability to apply these capabilities in customer environments.
• Comfortable assessing security posture, identifying control gaps and developing practical, prioritised remediation plans across Microsoft 365, endpoint and SaaS environments, aligned to customer risk and business priorities.
• Clear communicator who can translate security risks, business requirements and implementation constraints into high-quality customer deliverables, actionable outcomes and clear recommendations for technical and non-technical stakeholders.
• Commercially aware, with experience contributing to consultancy delivery, requirements gathering, pre-sales activity and Statements of Work, while supporting practical scope, effort and outcome definition.

Knowledge and experience in the following areas is highly advantageous:

• Proven experience with Defender for Cloud Apps for SaaS discovery, governance and risk management.
• Understanding and knowledge of security baselines and control frameworks used to support risk-based recommendations.
• Experience of phased adoption approaches for data security and application governance controls.
• Working knowledge of Azure DevOps or similar delivery tooling.

Desirable certifications:

• SC-401 (Microsoft Information Security Administrator Associate)
• SC-400 (Microsoft Information Protection and Compliance Administrator Associate)
• MS-102
• (Microsoft 365 Administrator Expert)
• SC-200 (Microsoft Security Operations Analyst Associate)

What we look for in our people

• Strong alignment with FSP values and ethos
• Commitment to teamwork, quality and mutual success
• Proactivity with an ability to operate with pace and energy
• Strong communication and interpersonal skills
• Dedication to excellence and quality

Who are FSP?

FSP is a leading consultancy specialising in Digital, Security and AI solutions. Our success is enabled by our unwavering commitment to excellence, our people centric culture alongside best-in-class operations, ensuring impactful and sustainable outcomes for our clients.

As a long standing and highly accredited Microsoft Partner, with extensive solution designations, we partner with clients across a range of commercial sectors, enabling digital transformation, innovation and robust cyber security.

We navigate the complexities of data sensitivity, confidentiality, governance and compliance. We blend strategic insight, depth of technical expertise, delivery and operational excellence to meet the specific requirements outlined.

We take a collaborative, one team approach with our clients to drive sustainable change, providing outstanding client experience and delivering exceptional results that are aligned with business priorities.

Our commitment to security and quality is reinforced by our ISO27001 and ISO9001 certifications (UKAS), as well as our CREST approved penetration testing and SOC capabilities. Additionally, we are an IASME Cyber Essentials Certification Body and Cyber Essentials Plus certified.

Find out more about our accolades here: https://fsp.co/about-fsp/

Why Work for FSP?

• A collaborative and supportive environment in which you can grow and develop your career.
• The tools and opportunity to do work you can be proud of.
• A chance to work alongside some of the best people in the industry, who are always willing to share their knowledge and experience.
• Flexible working. We empower you to make smart choices about when and where to work to achieve great results.
• Industry-leading coaching and mentoring.
• Competitive salary and an excellent benefits package.

Equal and Fair Opportunity

FSP is an equal opportunity employer, and we welcome applications from all suitable candidates. We consider all applicants for employment regardless of age, disability, sexual orientation, gender identity, family or parental status, race, colour, nationality, ethnic or national origin, religion or belief.

Research suggests that applicants from underrepresented groups are less likely to apply for roles unless they meet every requirement or feel there are no barriers to entry. If you are excited about a potential role with us but are concerned that you may not be a perfect fit, we encourage you to apply. You could be the ideal candidate for this role or another opportunity within FSP.

We strive to provide every applicant with a fair opportunity to present themselves in the best possible way during interviews and meetings. If you require any adjustments for a call or in-person meeting, please let us know.