Microsoft Defender Engineer

Experis - ManpowerGroup; City Of London; On-site; GBP 60,000 - 80,000; Full time

Job summary

A leading recruitment agency in London is seeking an accomplished IT Engineer to enhance cyber defense through the Microsoft Defender ecosystem. The successful candidate will manage security operations across various platforms, engage with stakeholders, and possess essential cyber security skills, including Microsoft security certifications. This role is onsite and inside IR35, requiring proactive problem-solving and communication abilities.

Qualifications

• Strong experience with Microsoft Defender platforms.
• Incident investigation skills across endpoint, identity, and cloud.
• Skilled in automation using PowerShell.

Responsibilities

• Manage and optimise Microsoft Defender across different platforms.
• Monitor alerts and conduct threat investigations.
• Collaborate with infrastructure and cyber security teams.

Skills

Experience with Microsoft Defender platforms

Incident investigation across endpoint, identity, and cloud

Understanding of Microsoft 365

Understanding of Azure

Understanding of Zero Trust

Skilled in ASR rules

Knowledge of AV baselines

KQL analytics

Education

Microsoft security certifications such as SC 200, SC 300, or SC 400

Job description

IT Engineer - Microsoft Defender Security Operations

3 months

London - onsite

Inside IR35 - Umbrella only

Role Overview

We are seeking an accomplished IT Engineer with specialist expertise in the Microsoft Defender security ecosystem. The successful candidate will strengthen cyber defence across endpoints, identities, cloud services, and hybrid infrastructure.

Key Responsibilities

Security operations and threat defence

• Manage and optimise Microsoft Defender across Endpoint, Identity, Cloud Apps, Office 365, and Cloud Security Posture Management.
• Monitor alerts and conduct threat investigations.
• Support incident response with containment and remediation.
• Conduct proactive threat hunting.

Platform administration and governance

• Configure policy baselines and protection profiles.
• Maintain governance and compliance alignment.
• Lead version management and capability tuning.
• Maintain documentation for configurations and processes.

Stakeholder engagement and improvement

• Collaborate with Infrastructure, Cloud, and Cyber Security teams.
• Provide security insights to projects.
• Produce reporting for stakeholders.
• Identify automation and workflow enhancements.

Essential Skills

• Strong experience with Microsoft Defender platforms.
• Incident investigation skills across endpoint, identity, and cloud.
• Understanding of Microsoft 365, Azure, and Zero Trust.
• Skilled in ASR rules, AV baselines, and KQL analytics.

Desirable Skills

• Experience with Microsoft Sentinel.
• Understanding of MITRE ATT and CK.
• Exposure to red team activities.
• Familiarity with automation using PowerShell.

Professional Attributes

• Analytical thinker.
• Resilient and proactive.
• Strong communicator.
• Collaborative mindset.

Qualifications

• Microsoft security certifications such as SC 200, SC 300, or SC 400.
• Broader cloud or cyber qualifications beneficial.