Security Engineer: SIEM, IAM & Incident Response

Penningtons Manches LLP; Basingstoke; On-site; GBP 60,000 - 90,000; Full time

Job summary

Penningtons Manches LLP is seeking a Security Engineer to protect the firm’s technology environment. You will monitor security operations, triage alerts, coordinate with the external SOC, and lead incident response for security events.

You will own vulnerability management, patch governance, and Identity & Access Management, including Entra ID/Azure AD and PIM, ensuring least privilege and timely access provisioning.

Qualifications

• Hands-on experience with SIEM platforms - alert triage, rule management, and investigation.
• Practical experience with Defender products - Defender for Endpoint, Defender for Cloud Apps, Defender for Identity.
• Vulnerability management experience - scanning, triage, and remediation tracking.
• Identity & access management knowledge - Entra ID / Azure AD, conditional access, PIM, access reviews.
• Incident response experience - containment, investigation, and remediation in a real-world environment.
• Experience responding to real security incidents and managing IAM governance-related processes.

Responsibilities

• Monitor the SIEM platform and security tooling daily - triaging alerts, investigating anomalies, and escalating threats.
• Act as the named internal interface to the external SOC - on-call escalations and incident decisions.
• Lead incident response for confirmed security events - coordinating containment, remediation and recovery.
• Own Defender for Endpoint / XDR and Defender for Cloud Apps - maintain configuration and tune detection policies.
• Manage patch governance and vulnerability remediation tracking to SLA.

Skills

SIEM platforms

Defender products

Vulnerability management

IAM (Entra ID / Azure AD)

Incident response

External SOC liaison

Risk communication

On-call coordination

Tools

Microsoft Sentinel

Splunk

Defender for Endpoint

Defender for Cloud Apps

Defender for Identity

Purview Compliance

Job description

Penningtons Manches LLP is seeking a Security Engineer to protect the firm’s technology environment. You will monitor security operations, triage alerts, coordinate with the external SOC, and lead incident response for security events.

You will own vulnerability management, patch governance, and Identity & Access Management, including Entra ID/Azure AD and PIM, ensuring least privilege and timely access provisioning.