Security Engineer in City

CPS Group (UK) Limited; City; Hybrid; GBP 27,000 - 45,000; Full time

Job summary

CPS Group is seeking a Security Engineer in Cardiff with a hybrid arrangement. You’ll be the technical contact for clients, guiding them through Microsoft security solutions and best practices.

You’ll configure Defender policies, Entra settings and Exchange Online security, develop detections with Sentinel and KQL, and support incidents while collaborating with senior engineers to resolve complex issues.

Qualifications

• Experience in cyber security, SOC, IT support or technical delivery.
• Strong knowledge of Microsoft security technologies (Defender XDR, Entra, Defender for Cloud Apps, Exchange Online).
• Good understanding of security best practices and incident response.

Responsibilities

• Act as a technical point of contact for clients and advise on Microsoft security solutions.
• Configure and tune Defender policies, Entra settings and Exchange Online security.
• Build and maintain detection capabilities using Microsoft Sentinel and KQL.

Skills

Client relationship management

Technical communication

Problem solving

Escalation handling

Documentation

Education

Degree in Computer Science/Cyber Security

Tools

Microsoft Defender XDR

Microsoft Entra

Defender for Cloud Apps

Exchange Online

Microsoft Sentinel

KQL

Advanced Hunting

Python

Bicep

ARM

JSON

YAML

Azure Logic Apps

Azure Functions

Jinja2

Job description

Security Engineer

Cardiff/Hybrid

Up to 45,000

CPS Group are working with a leading Microsoft-focused security partner who are looking to add a Security Engineer to their growing Cyber Security Delivery Team.

This is a great opportunity for someone with experience in cyber security, SOC, IT support or technical delivery who enjoys working with clients and wants to build their expertise across the Microsoft security stack.

As a Security Engineer, you'll act as a technical point of contact for clients, helping them get the most from their Microsoft security solutions. You'll work closely with the wider Delivery and Engineering teams, providing practical advice, investigating issues and making security improvements across client environments.

You'll work with technologies including Microsoft Defender XDR, Microsoft Entra, Defender for Cloud Apps, Exchange Online and Microsoft Sentinel.

What you'll be doing

• Building strong relationships with clients and acting as a trusted technical point of contact
• Supporting client calls and explaining technical issues and recommendations clearly
• Assessing incoming technical requests to ensure they are appropriate, in scope and aligned with best practice
• Configuring and tuning Microsoft security controls, including Defender policies, Entra settings and Exchange Online security
• Building and maintaining detection capabilities using KQL, Advanced Hunting and Microsoft Sentinel
• Managing phishing simulation campaigns and supporting vulnerability scanning
• Reviewing client environments and identifying opportunities to improve their Microsoft 365 security posture
• Supporting incident response activities and security investigations
• Producing clear technical reports, recommendations and documentation
• Working with senior engineers to triage and escalat[e] more complex technical issues
• Where applicable, using scripting and automation such as Python, Bicep, ARM, JSON or YAML to improve processes and efficiency

What we're looking for

We're looking for someone with a genuine interest in cyber security, strong communication skills and the technical ability to work confidently with clients.

You'll ideally have:

• Experience in a security or technical environment, such as SOC, Security Engineering, IT Support or Technical Delivery
• Working knowledge of Microsoft security technologies, particularly Defender XDR, Entra, Defender for Cloud Apps and Exchange Online
• Strong knowledge of KQL and Advanced Hunting
• Experience with Microsoft Sentinel, including analytics rules and Content Hub solutions
• Good understanding of security protocols, standards and best practices
• Knowledge of vulnerability management and risk analysis
• Strong technical judgement and the ability to recognise when an issue needs to be escalated
• Excellent communication skills, with the ability to explain technical information to both technical and non-technical audiences
• Strong written skills and experience producing technical documentation or reports
• A proactive and curious approach, with a genuine desire to continue developing your technical skills

A degree in Computer Science, Cyber Security or a related subject would be beneficial, although equivalent professional experience will also be considered.

It would be great if you also have experience with:

• Python, Bicep, ARM, JSON or YAML
• Azure Logic Apps, Azure Functions or codeless playbooks
• Jinja2
• Microsoft certifications such as SC-200, SC-300, SC-401, MS-102 or AZ-500

Contact: Zach Bennett - CPS Group