Microsoft Security Engineer – Defender XDR & Sentinel (Hybrid)

CPS Group (UK) Limited; Cardiff; Hybrid; GBP 41,000 - 50,000; Full time

Job summary

CPS Group (UK) Limited is seeking a Security Engineer in Cardiff on a hybrid basis to join a Microsoft-focused security partner. You will act as a technical point of contact, defending client environments and helping maximise Microsoft security investments.

You’ll work with Defender XDR, Entra, Defender for Cloud Apps, Exchange Online and Sentinel, building detection capabilities, guiding incidents, and producing clear technical reports for clients.

Qualifications

• Experience in a security or technical environment such as SOC, Security Engineering, IT Support or Technical Delivery.
• Working knowledge of Microsoft security technologies (Defender XDR, Entra, Defender for Cloud Apps, Exchange Online).
• Strong knowledge of KQL and Advanced Hunting.
• Experience with Microsoft Sentinel analytics rules and Content Hub solutions.
• Good understanding of security protocols, standards and best practices.
• Knowledge of vulnerability management and risk analysis.
• Excellent communication and ability to explain technical information to diverse audiences.

Responsibilities

• Build strong relationships with clients and act as a trusted technical contact.
• Support client calls and explain technical issues and recommendations clearly.
• Assess incoming technical requests for scope and best practices.
• Configure and tune Microsoft security controls (Defender policies, Entra settings, Exchange Online security).
• Build and maintain detection capabilities using KQL, Advanced Hunting and Microsoft Sentinel.
• Manage phishing simulation campaigns and support vulnerability scanning.
• Review client environments to improve Microsoft 365 security posture.
• Support incident response activities and security investigations.
• Produce clear technical reports, recommendations and documentation.
• Collaborate with senior engineers to triage more complex issues.
• Utilise scripting/automation (Python, Bicep, ARM, JSON, YAML) to improve processes.

Skills

KQL

Microsoft Defender XDR

Microsoft Entra

Microsoft Sentinel

Exchange Online

Education

Degree in Computer Science or Cyber Security

Tools

Python

Bicep

ARM

JSON

YAML

Job description

CPS Group (UK) Limited is seeking a Security Engineer in Cardiff on a hybrid basis to join a Microsoft-focused security partner. You will act as a technical point of contact, defending client environments and helping maximise Microsoft security investments.

You’ll work with Defender XDR, Entra, Defender for Cloud Apps, Exchange Online and Sentinel, building detection capabilities, guiding incidents, and producing clear technical reports for clients.