Information Security Project Engineer

Academia Ltd t/a Smartdesc; Greater London; On-site; GBP 70,000 - 100,000; Full time

Job summary

Academia Ltd t/a Smartdesc is seeking an Information Security Project Engineer to join the Information Security team, leading security-focused projects and acting as the technical lead for Sophos MDR and vulnerability management with clients.

You will scope, document and cost projects, create templates, and deliver Microsoft Purview, M365 security, Azure reviews and device management.

The role requires strong communication, time management and the willingness to travel to customer sites.

Qualifications

• Solid experience delivering security-focused projects for Microsoft 365 and cloud security.
• Ability to document projects and communicate with security consultants.
• Experience as technical lead for security solutions.
• Willingness to travel to customer sites.
• Certification in Microsoft security technologies preferred.

Responsibilities

• Scope, build and document security projects based on business needs.
• Deliver projects including Microsoft Purview, M365 security, and Azure reviews.
• Create templates for data capture, scoping and costing.
• Develop catalogue of repeatable productised projects.
• Build documentation, user comms and training packages.
• Remediation work: vulnerabilities; drive third-parties to remediate.
• Provide customer-ready vulnerability reports.
• Act as technical lead for Sophos MDR.
• Support consultants with Microsoft security roadmaps.

Skills

Attention to detail

Strong communication

Time management

Under pressure

Stakeholder management

Travel to sites

Microsoft solutions

Security best practices

Documentation

Education

Microsoft SC100

SC300

SC401

Azure Security Engineer Associate

Azure Endpoint Administrator Associate

OS experience (iOS/Android/Linux)

Security certifications

Tools

Microsoft Purview

Azure Security

MDM/MAM

Vulnerability management tools

Job description

We are currently seeking to recruit an Information Security Project Engineer to strengthen our Information Security team. As a member of the team, the emphasis will be on delivering security focused projects, acting as technical lead for our Sophos MDR solution and vulnerability management customers.

The Information Security Project Engineer will be responsible for ensuring projects are documented and completed to a high quality and supporting the Information Security Consultants as a dedicated Microsoft Security Subject Matter Expert. This role would suit a highly competent individual with strong communication, time management & technical skills.

Amongst other tasks you will be responsible for:

• Working closely with the Information Security Consultants to scope, build and document security focused projects based on business needs, security requirements and best practice.

Delivery of security projects including:

• Microsoft Purview
• M365 Security best practice implementation
• Azure Security reviews
• inTune / MDM / MAM
• Vulnerability remediation

Creating templates to aid data capture, scoping and costing for another similar project.

Helping to develop a catalogue of common repeatable productised projects for delivery by themselves or other team members.

Building documentation including user comms and training packages where appropriate.

Non-standard vulnerability tracking and remediation for customers with vulnerability management contracts, automating deployment of remediations where possible so they are repeatable for other clients.

Remediation may include:

• Vulnerabilities that require configuration changes rather than software updates
• Removal of legacy software or components
• Pro-actively driving 3rdparties to remediate software within their responsibilities
• Identifying and applying compensating controls where remediation is not possible

Providing customer ready reports on vulnerability management activities and status.

Acting as technical lead for Sophos MDR within the Information Security Team

Acting as Microsoft Security Subject Matter Expert supporting the Information Security Consultants providing support to build security roadmaps for customers.

Key Skills:

• Attention to fine detail in all aspects of work including documentation of work undertaken
• Ability to work effectively under pressure in a fast-paced, dynamic working environment and manage conflicting priorities to achieve deadlines
• Excellent communication skills
• Establish and maintain constructive working relationships
• Excellent time management skills
• Ability to drive continual improvements (both internally and to our clients) using technology and process implementation and refinement
• To be able to travel to various customer sites as and when required
• Prior experience designing and implementing Microsoft solutions
• Understanding of how to deliver Security best practices within the Microsoft product suite
• Ability to demonstrate solutions to customers when necessary

The ideal candidate will have experience and/or certification in the following areas:

• Microsoft SC series certifications including SC100, SC300 and SC401
• Microsoft Certified: Azure Security Engineer Associate (or higher)
• Microsoft Certified: Azure Endpoint Administrator Associate (or higher)
• Other Operating System Experience (iOS, Android, Linux )
• Other security focused certifications.