Security Engineer

TRIA; Greater London, Knutsford; Híbrido; GBP 65.000 - 90.000; Jornada completa

Descripción de la vacante

TRIA is seeking a Security Engineer (Path to Architecture) for a remote-first role in the UK with optional hubs in London and Knutsford. You will join a growing security function as the first technical security voice in architecture decisions across the group.

You will design security patterns for Microsoft 365 and Azure, solve IAM/PAM challenges, and ensure secure-by-design in a live IT transformation. Mentorship will support your growth into ownership of architecture tasks.

Formación

• Experience securing Microsoft 365, Azure and identity platforms.
• Hands-on security design experience in large-scale environments.
• Ability to translate business needs into secure architectures.

Responsabilidades

• Act as the front door for security on major architecture projects across the group.
• Design security patterns for Microsoft 365 and Azure estate: identity, access, Defender and Sentinel.
• Turn business requirements into security capabilities for architecture decisions.
• Embed secure-by-design into IT transformation initiatives.
• Own technical assurance across testing and control validation.
• Coordinate with managed services and MDR providers as technical authority.

Conocimientos

Azure security

M365 security

Entra

Defender

Sentinel

IAM/PAM

EDR

Security architecture

Security standards

Descripción del empleo

Security Engineer (Path to Architecture)

Remote-first (UK): optional hubs in London, Knutsford

You've spent years hardening configs, tuning Defender policies and fixing what other people designed. You know you could design it better, but every architect role asks for "proven architecture experience". How do you get that without someone giving you the chance?

This is the chance.

A UK-listed global engineering group is building its security function from the ground up.

The CEO wants monthly cyber updates at executive committee level.

The budget has been committed.

They need a Security Engineer to be the first technical security voice in every architecture decision across the group.

You'll be mentored by a Head of Cyber who will give you architectural cover while you build your confidence. You'll work alongside a newly formed architecture function that sets the principles, so you're learning inside a structure. Your job is to turn those principles into real security designs.

The work is architecture, and the plan is for you to grow into owning it.

What You'll Do

• Act as the front door for security on major architecture and engineering projects across the group, so you're in the room from the start rather than called in at the end.
• Design security patterns and standards for a Microsoft 365 and Azure estate: identity, privileged access, Entra, Defender and Sentinel.
• Turn business requirements from global divisions into security capabilities, the core skill that separates architects from engineers.
• Embed secure-by-design into a live IT transformation, shaping systems before they're built.
• Own technical assurance across pen testing, vulnerability assessment and control validation, so you can see whether the designs actually hold up.
• Hold managed service and MDR partners to account as the technical authority.

What We're Looking For

• A strong Security Engineer with solid hands-on Microsoft security experience (Azure, M365, Entra, Defender, Sentinel) and good IAM/PAM know-how.
• Network and endpoint security experience, including segmentation and EDR.
• Someone who already thinks beyond the ticket, asking "why is it built this way?" and "what should it look like?"
• Exposure to design work is a plus: contributing to architecture decisions, writing standards, or reviewing solution designs. A formal architect title isn't needed.
• Pragmatism and curiosity matter more than a perfect checklist. Defence, OT or Rapid7 experience is a bonus, not a requirement, and no SC clearance is needed.

You’ll get a ground-floor seat in a growing function, with leadership and direct reports expected as the team scales through 2027–28.