Security Engineer

Barclay Simpson; Remote; GBP 50,000 - 70,000; Full time

Job summary

A leading cybersecurity recruitment agency in the United Kingdom is looking for a Security Engineer with end user computing experience. The candidate will design, build, and secure Windows-based end-user environments across various platforms. Responsibilities include building secure Windows images, managing endpoint security, and advising on risk and security design. This fulltime role offers an opportunity to integrate security controls and tools, ensuring compliance and operational viability.

Qualifications

• Strong experience in building and securing Windows desktop images.
• Knowledge of Intune, Microsoft 365, Entra ID, and Microsoft Defender.
• Experience with Azure Virtual Desktop, including mapping virtual builds to physical devices.
• Familiarity with CIS benchmarks and secure configuration standards.
• Experience with vulnerability management tools like Qualys.
• Ability to assess risk and communicate security decisions.

Responsibilities

• Build and maintain secure Windows 10/11 images for physical devices and virtual desktops.
• Ensure Windows builds meet security compliance (CIS-aligned).
• Configure and manage endpoint security tooling.
• Integrate operational tooling on the secure build.
• Secure and manage Azure Virtual Desktop environments.
• Implement endpoint policies using Intune, Entra ID, and Microsoft 365.
• Advise on secure architecture and assess risk decisions.

Skills

Building and securing Windows desktop images

Knowledge of Intune

Knowledge of Microsoft 365

Knowledge of Entra ID

Knowledge of Microsoft Defender

Experience with Azure Virtual Desktop

Familiarity with CIS benchmarks

Experience with vulnerability management tools

Ability to assess risk

Job description

Security Engineer with end user computing experience required to design, build, and secure Windows-based end-user environments across physical devices, cloud, and virtual desktops. This role is split 50/50 between hands-on engineering and security consulting, ensuring Windows builds are secure, compliant, and operationally viable, while advising on risk, design decisions, and configuration changes.

You will own secure Windows builds, ensure compliance with security controls (eg CIS), integrate security and operational tooling, and enable other products to safely operate on the build. The role also requires reviewing risk decisions prior to configuration changes and balancing security with usability.

Key Responsibilities

Hands-On Engineering

• Build and maintain secure Windows 10/11 images for physical devices and virtual desktops.
• Ensure Windows builds are security compliant (CIS-aligned) and production-ready.
• Configure and manage endpoint security tooling (Microsoft Defender, Qualys, encryption, EDR).
• Integrate operational tooling and ensure other products can safely operate on the secure build.
• Secure and manage Azure Virtual Desktop (AVD) environments, including persistent vs personal desktops.
• Implement endpoint policies using Intune, Entra ID, and Microsoft 365.

Consulting & Advisory

• Advise on secure EUC architecture across physical, virtual, and cloud desktops.
• Review and assess risk decisions prior to configuration changes.
• Provide guidance on identity, access, and endpoint security design.
• Support stakeholders with secure desktop strategies and trade-off decisions.
• Contribute to documentation, standards, and security recommendations.

Required Skills & Experience

• Strong experience building and securing Windows desktop images.
• Knowledge of Intune, Microsoft 365, Entra ID, and Microsoft Defender.
• Experience with Azure Virtual Desktop (AVD), including persistent vs personal desktops and mapping virtual builds to physical devices.
• Familiarity with CIS benchmarks and secure configuration standards.
• Experience with vulnerability management tools such as Qualys.
• Ability to assess risk and clearly communicate security decisions.

Barclay Simpson, worldwide specialists in Cyber Security jobs: https://www.barclaysimpson.com/specialisms/cyber-security-jobs/

An official job listing by Barclay Simpson: https://www.barclaysimpson.com/job/security-engineer/