Security Engineer

Pontoon; Greater London; Hybrid; GBP 129,000 - 148,000; Full time

Job summary

Pontoon is seeking a hands-on Security Engineer to join a 6-month contract, working on a Microsoft cloud security estate. The role is hybrid with Midlands-based office visits about once per month and requires strong experience in IAM, RBAC, Privileged Access Management and vulnerability remediation.

You will implement security controls, identify weaknesses, and drive remediation while supporting external penetration testing programs over the next 3–6 months.

Qualifications

• Hands-on security engineering experience in a corporate/regulated environment.
• Experience implementing CIS controls and security hardening.

Responsibilities

• Implement, configure and maintain security controls across the Microsoft security ecosystem.
• Identify security gaps and drive remediation activities to improve overall security posture.
• Support the preparation, coordination and remediation of external penetration testing engagements.
• Manage identity, access management and privileged access controls.
• Configure and maintain Conditional Access, RBAC and Privileged Identity Management controls.
• Improve device, identity, data and cloud security controls across the estate.
• Support audit, assurance and compliance activities.
• Work with architecture, security operations and other teams to deliver improvements.
• Contribute to CIS control implementation.

Skills

Security engineering

IAM

RBAC

Privileged access management

Least privilege

Cloud security

Vulnerability remediation

Penetration testing support

Tools

Microsoft Entra ID

Microsoft Intune

Microsoft 365 Security

Microsoft Azure

Microsoft Purview

Job description

Security Engineer

6-Month Contract 700- 800 per day (Umbrella) Hybrid Working Midlands-based office visit approximately once per month

The Opportunity

We're supporting a leading organisation operating within a highly regulated and nationally significant environment as they continue to build and mature a new Microsoft cloud security estate.

This is a hands-on Security Engineer position suited to someone who enjoys improving security posture, implementing controls and solving security challenges in an evolving environment. You'll play a key role in strengthening the organisation's cyber security capabilities while helping prepare the environment for an upcoming penetration test programme over the next 3-6 months.

The team are looking for someone who can work autonomously, identify potential weaknesses before they become audit or pen-test findings, and drive remediation activities from start to finish.

Key Responsibilities

• Implement, configure and maintain security controls across the Microsoft security ecosystem.
• Identify security gaps and drive remediation activities to improve overall security posture.
• Support the preparation, coordination and remediation of external penetration testing engagements.
• Implement and manage identity, access management and privileged access controls.
• Configure and maintain Conditional Access, RBAC and Privileged Identity Management controls.
• Improve device, identity, data and cloud security controls across the estate.
• Support audit, assurance and compliance activities.
• Work closely with architecture, security operations and wider technology teams to deliver security improvements.
• Contribute to security hardening initiatives and CIS control implementation.

Essential Skills & Experience

• Strong Security Engineering background.
• Hands-on experience with:
  • Microsoft Entra ID
  • Microsoft Intune
  • Microsoft 365 Security
  • Microsoft Azure
  • Microsoft Purview
• Experience implementing and assessing CIS security controls.
• Previous experience remediating vulnerabilities and penetration testing findings.
• Strong understanding of:
  • Identity & Access Management (IAM)
  • RBAC
  • Privileged Access Management
  • Least Privilege principles
• Experience working in cloud-first Microsoft environments.
• Ability to work independently and proactively identify security improvements.
• Strong stakeholder engagement and communication skills.

Desirable Experience

• Experience preparing environments ahead of external penetration testing.
• Exposure to regulated, critical infrastructure or highly secure environments.
• Experience working alongside Security Operations or Incident Response teams.
• Microsoft or security certifications such as SC-200, SC-300, SC-400, AZ-500, CISSP or CCSP.

Suitable Backgrounds

This role would suit a:

• Security Engineer
• Cloud Security Engineer
• Microsoft Security Engineer
• Identity & Access Management Engineer
• Azure Security Engineer
• Cyber Security Engineer

who enjoys hands-on technical delivery and taking ownership of security improvements within a developing environment.