Security Engineer

Pontoon; Warwick; On-site; GBP 110,000 - 149,000; Part time

Job summary

Pontoon is recruiting a Security Engineer for a 6-month fixed-term contract in Warwick. The role is hands-on, focusing on strengthening the Microsoft-based security posture and managing IAM, access controls, and data protection.

Collaboration with Security Architecture and Incident Response teams is essential. You will configure and maintain security controls across Intune, Entra ID, M365 Security, Azure, and Purview, and prepare for external penetration testing engagements.

Qualifications

• Hands-on security engineering with proven Microsoft security tech.
• Experience with Intune, Entra ID, M365 Security, Azure, Purview.
• Knowledge of CIS-based controls and remediating penetration testing findings.
• Identity & Access Management, least privilege, RBAC.
• Ability to work independently in greenfield environments; strong communication

Responsibilities

• Implement, configure, and maintain security controls across Microsoft security technologies.
• Manage and enhance identity and access management and data protection controls.
• Configure Conditional Access, RBAC, Privileged Identity Management, and compliance controls.
• Identify security gaps and perform remediation per security standards.
• Lead preparation for upcoming penetration testing engagements.
• Review pentest findings and translate to remediation plans.
• Support security assurance, risk assessments, and control validation.
• Collaborate with Security Architecture and CSIRT teams to enhance security posture.
• Assist with audit, compliance, and evidence gathering as required.

Skills

Security engineering

Identity & access management

RBAC

Least privilege

Stakeholder management

Independent work

Education

SC-200/SC-300/SC-400/AZ-500/CCSP

Tools

Microsoft Intune

Entra ID (Azure AD)

Microsoft 365 Security

Azure Security

Microsoft Purview

Job description

Job Title: Security Engineer

Location: Warwick (1 day per month/quarter)

Remuneration: £700 per day via Umbrella

Contract Details: Fixed Term Contract, 6 Months (strong extension potential)

Responsibilities

Join our client's team as a proactive Security Engineer! This hands-on role is perfect for someone who thrives in evolving environments and is ready to boost the cyber security posture within a new Strategic Infrastructure Microsoft environment. Your key responsibilities will include:

• Implementing, configuring, and maintaining security controls across various Microsoft security technologies such as Microsoft Intune, Entra ID, Microsoft 365, Azure, and Microsoft Purview.
• Managing and enhancing identity and access management, along with data protection controls.
• Configuring Conditional Access, RBAC, Privileged Identity Management, and compliance controls.
• Identifying security gaps and executing remediation activities in line with security standards.
• Leading preparation activities for upcoming penetration testing engagements.
• Reviewing penetration testing findings and translating them into actionable remediation plans.
• Supporting security assurance, risk assessments, and control validation activities.
• Collaborating with Security Architecture and Cyber Security Incident Response teams to elevate the overall security posture.
• Assisting with audit, compliance, and evidence-gathering activities when required.

Essential Experience

We're looking for a candidate with:

• A strong security engineering background, with hands-on technical experience.
• Proven experience in Microsoft Intune, Entra ID (Azure AD), Microsoft 365 Security, Azure Security, and Microsoft Purview.
• A solid understanding of CIS-based security controls and experience remediating penetration testing findings.
• Knowledge in Identity & Access Management, least privilege principles, and RBAC.
• The ability to work independently with minimal supervision in greenfield or early-stage environments.
• Strong stakeholder management and communication skills.

Ideal Background

You'll excel in this role if you have:

• Experience preparing environments for external penetration testing engagements.
• The ability to recognise common vulnerabilities and security gaps.
• Familiarity with regulated or Critical National Infrastructure (CNI) environments.
• Exposure to incident response and CSIRT functions.
• Relevant Microsoft or security certifications (e.g., SC-200, SC-300, SC-400, AZ-500, CCSP).

What We're Looking For

This role is designed for a proactive Security Engineer who enjoys a hands-on approach rather than purely advisory tasks. If you thrive in maturing environments and can autonomously drive remediation activities, we want to hear from you! Your experience in preparing organisations for penetration testing and enhancing security posture will be invaluable to our client.

Join us in building a robust security framework while making a significant impact!

Pontoon is an employment consultancy. We put expertise, energy, and enthusiasm into improving everyone's chance of being part of the workplace. We respect and appreciate people of all ethnicities, generations, religious beliefs, sexual orientations, gender identities, and more. We do this by showcasing their talents, skills, and unique experience in an inclusive environment that helps them thrive.

We use generative AI tools to support our candidate screening process. This helps us ensure a fair, consistent, and efficient experience for all applicants. Rest assured, all final decisions are made by our hiring team, and your application will be reviewed with care and attention.