Security Engineer

Hamilton Barnes ?; Cardiff; Remote; GBP 65,000 - 90,000; Full time

Benefits offered by this job

Private medical insurance

Life assurance and critical illness

Flexible benefits package

25 days annual leave plus birthday

Cycle to work scheme

Job summary

Hamilton Barnes is seeking a Security Engineer to act as a trusted technical partner for clients, combining deep security knowledge with the ability to explain complex concepts clearly.

The role is primarily remote with occasional Cardiff office attendance, supporting the Microsoft security ecosystem, reviewing requests, implementing changes, and guiding clients on Defender XDR, Entra, Sentinel, and Cloud Apps.

Qualifications

• Experience in security roles such as SOC, Security Engineering or technical delivery.
• Hands-on with Defender XDR, Entra, Defender for Cloud Apps and Exchange Online.
• Experience with Microsoft Sentinel and Content Hub solutions.
• Strong understanding of security protocols, risk analysis and vulnerability management.
• Ability to explain technical findings to both technical and non-technical audiences.

Responsibilities

• Build trusted client relationships as a technical contact.
• Support client calls and translate technical concepts into practical recommendations.
• Assess incoming requests for scope, suitability and best practice.
• Configure Defender policies and security settings within client environments.
• Manage Entra settings and Exchange security configurations.
• Develop and tune security detections using KQL and Microsoft Sentinel.
• Create Advanced Hunting queries and Sentinel Content Hub solutions.
• Manage phishing simulations and support vulnerability assessments.
• Interpret vulnerability results and provide recommendations.
• Audit and improve Microsoft 365 security environments.
• Assist with Incident Response investigations and escalations.
• Produce technical reports and configuration documentation.
• Use scripting and automation to improve security operations; contribute to Logic Apps / Azure Functions playbooks.

Skills

Microsoft Defender XDR

Microsoft Entra

Defender for Cloud Apps

Exchange Online

Microsoft Sentinel

KQL

Sentinel Content Hub

Automation scripting

Logic Apps

Azure Functions

Playbooks

Vulnerability assessments

Incident response

Technical reporting

Tools

PowerShell

Job description

As a Security Engineer, you will act as a trusted technical partner to clients, combining strong security knowledge with the communication skills to explain technical concepts clearly.

Working within a Cyber Security Delivery Team, you will support clients with technical queries, research and provide practical recommendations, and help them maximise their Microsoft security investments.

The position is primarily remote, with occasional attendance required in the Cardiff office. This is expected to be around a couple of times per month, depending on business requirements.

You will support the day-to-day client relationship as the technical point of contact, joining client calls where required to explain options, answer technical questions and provide clear guidance.

You will work across the Microsoft security ecosystem, including Microsoft Defender XDR, Microsoft Entra, Microsoft Defender for Cloud Apps, Exchange Online and Microsoft Sentinel. You will also have access to senior engineering support as you continue to develop your expertise.

A key part of the role will be reviewing and validating technical requests before work begins. You will assess whether requests are in scope, technically appropriate and aligned with security best practice. Where appropriate, you will implement changes directly within client environments. More complex requirements will be triaged and escalated to senior engineering teams.

Key Responsibilities

• Build strong client relationships as a trusted technical contact
• Support client calls and translate technical concepts into practical recommendations
• Assess incoming requests for scope, suitability and best practice
• Configure and tune Microsoft security controls within client environments
• Manage Defender policies, Entra settings and Exchange security configurations
• Configure and maintain Defender for Cloud Apps policies
• Develop and tune security detections using KQL and Microsoft Sentinel
• Create Advanced Hunting queries and implement Sentinel Content Hub solutions
• Manage phishing simulation campaigns and support vulnerability assessments
• Interpret vulnerability scanning results and provide appropriate recommendations
• Audit and improve Microsoft 365 security environments
• Support Secure Score improvements, device tagging and security lifecycle activities
• Assist with Incident Response investigations and security escalations
• Produce clear technical reports, recommendations and configuration documentation
• Review client-facing reports for technical accuracy
• Use scripting and automation to improve security operations where appropriate
• Contribute to automation using tools such as Logic Apps, Azure Functions and playbooks

What We're Looking For

• Previous experience in a security or technical role, such as SOC, Security Engineering, IT Support or Technical Delivery
• Working knowledge of Microsoft security technologies, particularly Defender XDR, Entra, Defender for Cloud Apps and Exchange Online
• Experience working with Microsoft Sentinel, including analytics rules and Content Hub solutions
• Good understanding of security protocols, principles and industry standards
• Understanding of vulnerability management and risk analysis
• Experience interpreting results from common vulnerability scanning tools
• Strong technical judgement and the ability to determine when issues should be escalated
• Excellent client-facing and interpersonal skills
• Ability to communicate technical findings effectively to both technical and non-technical audiences
• Strong written communication skills, particularly technical documentation and reporting
• A proactive, curious approach with a genuine desire to develop technically

Development

This role would suit someone who already has a foundation in cyber security and wants to continue developing your Microsoft security expertise. Training and professional certifications will be supported, with opportunities to broaden your technical knowledge and progress within the engineering team.

• Private medical insurance
• Life assurance and critical illness cover
• Flexible benefits package
• 25 days annual leave plus your birthday
• Enhanced family leave
• Flexible and agile working
• Continuous training and development
• Cycle to work scheme
• Peer recognition and reward programme
• Monthly social events and company-wide celebrations