Information Security Engineer

Broster Buchanan; United Kingdom; On-site; GBP 70,000 - 90,000; Full time

Job summary

Broster Buchanan is seeking an experienced Information Security Engineer to strengthen cloud security across Azure, M365 and hybrid environments in a multinational setting.

You will join an established Security Operations team, delivering practical guidance to stakeholders while supporting incident response and cyber security tooling across a diverse tech estate.

Qualifications

• Hands-on experience with Azure, M365, and preferably GCP.
• Strong knowledge of SIEM, vulnerability management and security monitoring.
• Experience supporting cyber incident response activities.
• Experience in enterprise-scale, multinational environments.
• Ability to translate technical risks into clear recommendations.
• Excellent communication with stakeholders.

Responsibilities

• Assess and improve security posture of Azure, M365 and hybrid infra environments.
• Review cloud infrastructure to identify vulnerabilities and propose improvements.
• Apply security best practices across Microsoft and Google Cloud environments.
• Support implementation and enhancement of security controls including identity management and Zero Trust.
• Assist investigations and responses to cyber security incidents.
• Work with SIEM, EDR, identity providers and cloud monitoring tools.
• Provide specialist cloud security expertise to incident responders.
• Contribute to the wider cyber response function with the external SOC provider.
• Provide practical cyber security advice to technical teams and stakeholders.
• Assess new technologies ensuring security is considered in implementations.
• Recommend improvements aligned with industry practices and threats.
• Translate complex risks into actionable recommendations.
• Maintain and enhance security tooling including SIEM and vulnerability management platforms.
• Support tool configuration, upgrades, integrations, monitoring and alerting.
• Conduct technical security reviews, audits and risk assessments.
• Contribute to security documentation, compliance activities and framework development.

Skills

Cyber security engineering

Cloud infrastructure

Azure / Microsoft 365

Incident response

SIEM

Vulnerability management

Security monitoring

Enterprise-scale environments

Stakeholder management

Continuous learning

GCP security

Terraform

Cybersecurity consultancy

NIST frameworks

Microsoft Defender

Conditional Access

Identity and access management

Cloud security monitoring

Tools

Terraform

Microsoft Defender

Job description

Our client has a permanent vacancy for an experienced Information Security Engineer. You will have hands‑on experience working with all aspects of Azure, M365, and preferably Google Cloud Platforms (GCP). As well as infrastructure, you should have experience and working knowledge of SIEM and vulnerability management platforms. The role will cover elements of cyber incident response, so a background in supporting a wider incident response function is a necessity.

You will join an established Security Operations team and have the opportunity to combine cloud security engineering, cyber incident response, security consultancy and technical assurance while working across a diverse technology estate.

Role

As part of the team, you’ll help strengthen security controls, improve cloud security capabilities and provide practical advice to stakeholders across the business. You’ll gain exposure to enterprise‑scale systems, modern security technologies and complex challenges within a global environment.

Responsibilities

• Assess and improve the security posture of Azure, Microsoft 365 and hybrid infrastructure environments.
• Review cloud infrastructure, including compute, networking and storage, identifying vulnerabilities and recommending improvements.
• Apply security best practices across Microsoft and, ideally, Google Cloud Platform environments.
• Support the implementation and enhancement of security controls, including identity management, Conditional Access and Zero Trust principles.
• Support the investigation and response to a range of cyber security incidents.
• Work with technologies including SIEM, Endpoint Detection and Response (EDR), identity providers and cloud security monitoring tools.
• Provide specialist cloud and infrastructure security expertise to support incident responders.
• Contribute to the wider cyber response function, working alongside an external Managed Security Operations Centre (SOC) provider.
• Provide practical cyber security advice to technical teams and business stakeholders.
• Assess new technologies and business initiatives, ensuring security is considered throughout implementation.
• Recommend improvements aligned with industry best practices, emerging threats and organisational security requirements.
• Translate complex technical risks into clear, actionable recommendations.
• Maintain and enhance security tooling, including SIEM and vulnerability management platforms.
• Support tool configuration, upgrades, integrations, monitoring and alerting.
• Conduct technical security reviews, audits and risk assessments.
• Contribute to security documentation, compliance activities and the ongoing development of security controls and frameworks.

Skills and Experience

• Strong hands‑on cyber security engineering experience.
• Solid IT infrastructure knowledge, including cloud and Infrastructure as a Service (IaaS) environments.
• Practical experience working with Microsoft security technologies, Azure and Microsoft 365.
• Experience supporting cyber incident response activities.
• A good understanding of SIEM, security monitoring and vulnerability management.
• Experience working in enterprise‑scale, complex or multinational technology environments.
• Strong communication and stakeholder management skills, with the ability to explain technical concepts clearly to technical and non-technical audiences.
• A proactive approach to learning, problem‑solving and professional development.
• Exposure to Google Cloud Platform (GCP) and its security capabilities.
• Experience working with Infrastructure as Code (IaC), particularly Terraform.
• Consulting experience gained within a cyber security consultancy, Managed Security Service Provider (MSSP) or similar environment.
• Experience supporting large‑scale technology transformations.
• Knowledge of security frameworks, including NIST and relevant NIST 800‑series publications.
• Experience with Microsoft Defender, Conditional Access, identity and access management, and cloud security monitoring.