Microsoft Security Engineer

Leap29; Basildon; On-site; GBP 90,000 - 110,000; Full time

Job summary

Leap29 is recruiting a Senior Microsoft Security Engineer to join a security engineering function across enterprise Azure environments. You will design, implement and optimise Microsoft security technologies including Microsoft Sentinel, Defender XDR and Microsoft Purview, delivering scalable security solutions and improving detection coverage.

The role requires hands-on experience with Sentinel analytics using KQL, Defender XDR capabilities, Azure security controls and IAM with Entra ID.

Qualifications

• Extensive hands-on experience in Microsoft security engineering across Azure environments.
• Proficient with Sentinel, Defender XDR and Purview configurations and risk mitigation.
• Experience implementing IAM and Entra ID, CA policies and identity security controls.

Responsibilities

• Design, implement and optimise Microsoft Sentinel environments and onboarding.
• Develop and tune Sentinel analytics rules using KQL for better detection.
• Support security monitoring, threat detection and incident response across enterprise systems.
• Configure Defender XDR capabilities including endpoints, identity, cloud and email security.
• Implement and manage Purview solutions including DLP and sensitivity labels.
• Conduct security assessments and propose Azure security improvements.
• Collaborate with stakeholders to produce security documentation and plans.
• Develop security automation using Logic Apps, Functions, Terraform and Bicep.

Skills

Security engineering

KQL

Sentinel analytics

Automation

IAM security

Cloud security

Security architecture

SIEM optimisation

Threat detection

Security documentation

Education

Bachelor’s degree in a relevant field

Tools

Microsoft Sentinel

Defender XDR

Microsoft Purview

Azure

Terraform

Bicep

PowerShell

Logic Apps

Azure Functions

Azure DevOps

Job description

Senior Microsoft Security Engineer Azure Security | Microsoft Sentinel | Defender XDR | Purview | SIEM Engineering

We are currently supporting a leading organisation looking to hire an experienced Senior Microsoft Security Engineer to join their security engineering function. This is an excellent opportunity for a security professional with strong Microsoft security expertise to work across enterprise Azure environments, helping to improve security posture, strengthen detection capabilities and deliver scalable security solutions. You will play a key role in designing, implementing and optimising Microsoft security technologies including Microsoft Sentinel, Defender XDR, Microsoft Purview and Azure security controls.

Key Responsibilities

• Design, implement and optimise Microsoft Sentinel environments, including onboarding, configuration and continuous improvement
• Develop and tune Sentinel analytics rules using KQL, improving detection coverage and reducing false positives
• Support security monitoring, threat detection and incident investigation across enterprise environments
• Configure and enhance Microsoft Defender XDR capabilities including Defender for Endpoint, Identity, Cloud and Email security
• Implement and manage Microsoft Purview solutions including DLP policies, sensitivity labels and information protection controls
• Perform security assessments, identify gaps and recommend improvements across Azure security environments
• Support identity and access security improvements across Microsoft Entra ID, Conditional Access and IAM controls
• Build security automation solutions using technologies such as Logic Apps, Azure Functions, Terraform, Bicep and PowerShell
• Improve security operations through automation, process optimisation and engineering best practices
• Work with technical stakeholders to produce security documentation, recommendations and implementation plans

Required Experience

• Strong commercial experience within Microsoft security engineering roles
• Hands-on experience with Microsoft Sentinel, including KQL, detection engineering and SIEM optimisation
• Strong knowledge of Microsoft Defender XDR security capabilities
• Experience with Microsoft Purview DLP, sensitivity labels and information protection
• Strong understanding of Azure security principles and cloud security architecture
• Experience with Microsoft Entra ID, Conditional Access and identity security
• Understanding of security frameworks including MITRE ATT&CK, NIST or ISO 27001
• Experience with security automation and Infrastructure as Code technologies such as Terraform, Bicep or Azure DevOps

Desirable Experience

• Experience working within enterprise or MSSP environments
• Exposure to multi-cloud security environments including AWS or hybrid infrastructure
• Experience integrating third-party security platforms and telemetry sources into Sentinel
• Microsoft certifications such as AZ-500, SC-100, SC-200 or equivalent

What We Are Looking For

We are looking for someone who combines strong technical security engineering skills with the ability to improve and mature security capabilities. The ideal candidate will not just operate security tools but will understand how to engineer, automate and optimise Microsoft security platforms to provide real business value.

This role would suit a Senior Security Engineer, Microsoft Security Consultant, Cloud Security Engineer or Security Architect looking to work on challenging enterprise security projects.