Hands-On Security Engineer: Cloud, IAM & XDR

GBV Ltd; Preston; On-site; GBP 54,000 - 66,000; Full time

Benefits offered by this job

Bonus

Benefits

Job summary

GBV Ltd in Preston, UK is seeking a hands-on Security Engineer to design, implement and continuously improve security controls across cloud, identity, endpoints and applications within a large infrastructure estate.

You’ll join a 24x7 SOC-aligned security function supporting thousands of colleagues globally, with responsibilities spanning vulnerability remediation, incident response, threat-hunting and security monitoring using Microsoft Sentinel, Purview, Defender XDR and related tools.

Qualifications

• Hands-on security engineering role in cloud, identity, endpoint, network and app security.
• Experience building, hardening and improving security controls.
• Strong understanding of vulnerability remediation and security monitoring.
• Experience working with a 24x7 SOC or MDR environment.
• Familiarity with frameworks such as CAF, NIS2, ISO 27001/27701/22301.

Responsibilities

• Design, configure and harden security controls across cloud, servers, endpoints, identity and business apps.
• Establish secure baselines using CIS/Microsoft baselines.
• Engineer identity controls including MFA and least privilege.
• Maintain controls with Defender XDR, Sentinel, Intune, Entra ID and Purview.
• Support incident response, investigations and tabletop exercises.

Skills

Security Engineering

Incident response

Threat hunting

Logging & monitoring

Automation/ scripting

Tools

Microsoft Sentinel

Microsoft Purview

Qualys/Tenable

Microsoft Defender XDR

Intune

Entra ID

Azure AD/ Identity

PowerShell

KQL

MITRE ATT&CK

Job description

GBV Ltd in Preston, UK is seeking a hands-on Security Engineer to design, implement and continuously improve security controls across cloud, identity, endpoints and applications within a large infrastructure estate.

You’ll join a 24x7 SOC-aligned security function supporting thousands of colleagues globally, with responsibilities spanning vulnerability remediation, incident response, threat-hunting and security monitoring using Microsoft Sentinel, Purview, Defender XDR and related tools.