Security Engineer: Defender XDR & Sentinel Expert

Kocho; Cardiff; Remote; GBP 70,000 - 110,000; Full time

Job summary

Kocho is seeking an experienced Security Engineer to protect client environments and lead Microsoft Defender XDR initiatives. You will design, implement, and optimise security measures across systems and data, working with clients and the Security Operations team to ensure ongoing compliance and improvement.

You will deliver hands-on expertise across the Microsoft Security Stack, develop detection capabilities with KQL, and drive vulnerability management, reporting, and remediation with guidance

Qualifications

• Bachelor level degree in Computer Science, Cyber Security, or related field, or equivalent experience.
• Extensive experience in Security Engineering or Senior Security Analysis.
• Strong knowledge of security protocols and industry standards.
• Experience with vulnerability testing and risk analysis.
• SME in Microsoft Defender XDR.
• Strong knowledge of KQL and Advanced Hunting.
• Experience with vulnerability scanning tools and interpreting results.
• Strong client-facing skills; ability to translate findings into actionable recommendations.

Responsibilities

• Manage Microsoft Defender XDR, Microsoft 365 Defender, and related security controls.
• Develop, tune, and deploy KQL rules and Content Hub solutions; refine threat policies.
• Lead phishing simulations, vulnerability scans, and produce structured reports with recommendations.
• Present security insights to technical and non-technical stakeholders; guide remediation with clients and a Cyber Security PM.
• Provide Incident Response support via escalations; assist with playbooks using Azure Logic Apps.
• Audit and uplift client environments in Microsoft 365 Security Suite; monitor Secure Score and Defender policies.
• Utilize scripting (Python, Bicep, ARM, JSON, YAML) to automate processes and improve efficiency.

Skills

Security Engineering

Senior Security Analysis

KQL

Advanced Hunting

Microsoft Defender XDR

Vulnerability testing

Risk analysis

Client communication

Education

Degree in Computer Science or Cyber Security

Equivalent experience

Tools

Azure Logic Apps

Azure Functions

PowerShell

JSON

Bicep

ARM

Job description

Kocho is seeking an experienced Security Engineer to protect client environments and lead Microsoft Defender XDR initiatives. You will design, implement, and optimise security measures across systems and data, working with clients and the Security Operations team to ensure ongoing compliance and improvement.

You will deliver hands-on expertise across the Microsoft Security Stack, develop detection capabilities with KQL, and drive vulnerability management, reporting, and remediation with guidance