Security Engineer

CPS Group (UK) Limited; Cardiff; On-site; GBP 41,000 - 50,000; Full time

Job summary

CPS Group (UK) Limited is seeking a Security Engineer in Cardiff on a hybrid basis to join a Microsoft-focused security partner. You will act as a technical point of contact, defending client environments and helping maximise Microsoft security investments.

You’ll work with Defender XDR, Entra, Defender for Cloud Apps, Exchange Online and Sentinel, building detection capabilities, guiding incidents, and producing clear technical reports for clients.

Qualifications

• Experience in a security or technical environment such as SOC, Security Engineering, IT Support or Technical Delivery.
• Working knowledge of Microsoft security technologies (Defender XDR, Entra, Defender for Cloud Apps, Exchange Online).
• Strong knowledge of KQL and Advanced Hunting.
• Experience with Microsoft Sentinel analytics rules and Content Hub solutions.
• Good understanding of security protocols, standards and best practices.
• Knowledge of vulnerability management and risk analysis.
• Excellent communication and ability to explain technical information to diverse audiences.

Responsibilities

• Build strong relationships with clients and act as a trusted technical contact.
• Support client calls and explain technical issues and recommendations clearly.
• Assess incoming technical requests for scope and best practices.
• Configure and tune Microsoft security controls (Defender policies, Entra settings, Exchange Online security).
• Build and maintain detection capabilities using KQL, Advanced Hunting and Microsoft Sentinel.
• Manage phishing simulation campaigns and support vulnerability scanning.
• Review client environments to improve Microsoft 365 security posture.
• Support incident response activities and security investigations.
• Produce clear technical reports, recommendations and documentation.
• Collaborate with senior engineers to triage more complex issues.
• Utilise scripting/automation (Python, Bicep, ARM, JSON, YAML) to improve processes.

Skills

KQL

Microsoft Defender XDR

Microsoft Entra

Microsoft Sentinel

Exchange Online

Education

Degree in Computer Science or Cyber Security

Tools

Python

Bicep

ARM

JSON

YAML

Job description

Security Engineer

Cardiff/Hybrid

Up to 45,000

CPS Group are working with a leading Microsoft-focused security partner who are looking to add a Security Engineer to their growing Cyber Security Delivery Team.

This is a great opportunity for someone with experience in cyber security, SOC, IT support or technical delivery who enjoys working with clients and wants to build their expertise across the Microsoft security stack.

As a Security Engineer, you'll act as a technical point of contact for clients, helping them get the most from their Microsoft security solutions. You'll work closely with the wider Delivery and Engineering teams, providing practical advice, investigating issues and making security improvements across client environments.

You'll work with technologies including Microsoft Defender XDR, Microsoft Entra, Defender for Cloud Apps, Exchange Online and Microsoft Sentinel.

What you'll be doing

• Building strong relationships with clients and acting as a trusted technical point of contact
• Supporting client calls and explaining technical issues and recommendations clearly
• Assessing incoming technical requests to ensure they are appropriate, in scope and aligned with best practice
• Configuring and tuning Microsoft security controls, including Defender policies, Entra settings and Exchange Online security
• Building and maintaining detection capabilities using KQL, Advanced Hunting and Microsoft Sentinel
• Managing phishing simulation campaigns and supporting vulnerability scanning
• Reviewing client environments and identifying opportunities to improve their Microsoft 365 security posture
• Supporting incident response activities and security investigations
• Producing clear technical reports, recommendations and documentation
• Working with senior engineers to triage and upscale more complex technical issues
• Where applicable, using scripting and automation such as Python, Bicep, ARM, JSON or YAML to improve processes and efficiency

What we're looking for

We're looking for someone with a genuine interest in cyber security, strong communication skills and the technical ability to work confidently with clients.

You'll ideally have:

• Experience in a security or technical environment, such as SOC, Security Engineering, IT Support or Technical Delivery
• Working knowledge of Microsoft security technologies, particularly Defender XDR, Entra, Defender for Cloud Apps and Exchange Online
• Strong knowledge of KQL and Advanced Hunting
• Experience with Microsoft Sentinel, including analytics rules and Content Hub solutions
• Good understanding of security protocols, standards and best practices
• Knowledge of vulnerability management and risk analysis
• Strong technical judgement and the ability to recognise when an issue needs to be escalated
• Excellent communication skills, with the ability to explain technical information to both technical and non-technical audiences
• Strong written skills and experience producing technical documentation or reports
• A proactive and curious approach, with a genuine desire to continue developing your technical skills

A degree in Computer Science, Cyber Security or a related subject would be beneficial, although equivalent professional experience will also be considered.

It would be great if you also have experience with:

• Python, Bicep, ARM, JSON or YAML
• Azure Logic Apps, Azure Functions or codeless playbooks
• Jinja2
• Microsoft certifications such as SC-200, SC-300, SC-401, MS-102 or AZ-500

Contact: Zach Bennett - CPS Group

By applying to this advert you are giving CPS Group (UK) Ltd authority to hold and process your data for this specific role and any other roles we may deem suitable to you over time. We will not pass your data to any third party without your verbal or written permission to do so. All incoming and outgoing calls are recorded for training and compliance purposes. CPS Group (UK) Ltd is acting as an Employment Agency in relation to this vacancy. Our new privacy policy can be found here (url removed)