Microsoft Security Engineer

Leap29; Reading; On-site; GBP 90,000 - 120,000; Full time

Job summary

Leap29 is seeking a Senior Microsoft Security Engineer to design, implement and optimise Microsoft Sentinel and Defender XDR across large Azure environments in Reading, UK. You will develop detection coverage with KQL, tune analytics, and drive security posture improvements.

You will also configure Purview data loss protection, information protection controls and IAM/Conditional Access, while building automation with Logic Apps, Azure Functions, Terraform and PowerShell.

Qualifications

• Extensive experience designing and implementing Microsoft security platforms.
• Strong knowledge of Sentinel, Defender XDR and Purview configurations.
• Hands-on security engineering across Azure environments.

Responsibilities

• Design, implement and optimise Microsoft Sentinel environments with onboarding and tuning.
• Develop and tune Sentinel analytics rules using KQL to improve detection and reduce false positives.
• Support threat detection, incident investigation and security monitoring at scale.
• Configure Defender XDR across endpoints, identities, cloud and email.
• Implement Purview solutions including DLP policies and sensitivity labels.
• Perform security assessments and propose improvements across Azure security.
• Collaborate on IAM, Entra ID and Conditional Access controls.
• Build security automation using Logic Apps, Azure Functions, Terraform, Bicep and PowerShell.
• Improve security operations through process automation and engineering best practices.

Skills

Microsoft Sentinel

KQL

Sentinel analytics

Azure security

Defender XDR

Entra ID / IAM

Conditional Access

Automation / IaC

Terraform

Bicep

PowerShell

Logic Apps

Azure Functions

Security architecture

Cloud security

Tools

Terraform

Bicep

Azure DevOps

PowerShell

Logic Apps

Azure Functions

Job description

Azure Security | Microsoft Sentinel | Defender XDR | Purview | SIEM Engineering

We are currently supporting a leading organisation looking to hire an experienced Senior Microsoft Security Engineer to join their security engineering function.

This is an excellent opportunity for a security professional with strong Microsoft security expertise to work across enterprise Azure environments, helping to improve security posture, strengthen detection capabilities and deliver scalable security solutions.

You will play a key role in designing, implementing and optimising Microsoft security technologies including Microsoft Sentinel, Defender XDR, Microsoft Purview and Azure security controls.

Key Responsibilities

• Design, implement and optimise Microsoft Sentinel environments, including onboarding, configuration and continuous improvement
• Develop and tune Sentinel analytics rules using KQL, improving detection coverage and reducing false positives
• Support security monitoring, threat detection and incident investigation across enterprise environments
• Configure and enhance Microsoft Defender XDR capabilities including Defender for Endpoint, Identity, Cloud and Email security
• Implement and manage Microsoft Purview solutions including DLP policies, sensitivity labels and information protection controls
• Perform security assessments, identify gaps and recommend improvements across Azure security environments
• Support identity and access security improvements across Microsoft Entra ID,
• Conditional Access and IAM controls
• Build security automation solutions using technologies such as Logic Apps, Azure Functions, Terraform, Bicep and PowerShell
• Improve security operations through automation, process optimisation and engineering best practices
• Work with technical stakeholders to produce security documentation, recommendations and implementation plans

Required Experience

• Strong commercial experience within Microsoft security engineering roles
• Hands-on experience with Microsoft Sentinel, including KQL, detection engineering and SIEM optimisation
• Strong knowledge of Microsoft Defender XDR security capabilities
• Experience with Microsoft Purview DLP, sensitivity labels and information protection
• Strong understanding of Azure security principles and cloud security architecture
• Experience with Microsoft Entra ID, Conditional Access and identity security
• Understanding of security frameworks including MITRE ATT&CK, NIST or ISO 27001
• Experience with security automation and Infrastructure as Code technologies such as Terraform, Bicep or Azure DevOps
• Experience working within enterprise or MSSP environments
• Exposure to multi-cloud security environments including AWS or hybrid infrastructure
• Experience integrating third-party security platforms and telemetry sources into Sentinel
• Microsoft certifications such as AZ-500, SC-100, SC-200 or equivalent

What We Are Looking For

We are looking for someone who combines strong technical security engineering skills with the ability to improve and mature security capabilities.

The ideal candidate will not just operate security tools but will understand how to engineer, automate and optimise Microsoft security platforms to provide real business value.

This role would suit a Senior Security Engineer, Microsoft Security Consultant, Cloud Security Engineer or Security Architect looking to work on challenging enterprise security projects.