Security Tooling Engineer

M&G plc; Stirling, City of Edinburgh; Hybrid; GBP 70,000 - 110,000; Full time

Benefits offered by this job

pension up to 18%

Share Save Plan

Share Incentive Plan

38 days annual leave

Private Healthcare

Job summary

M&G plc is seeking a Security Tooling Engineer to maintain and evolve security monitoring and endpoint protection. You will be the SME for Microsoft Defender for Endpoint, while supporting Microsoft Sentinel and cloud security controls in Azure.

The role requires strong logging, data ingestion skills and collaboration across tech and business teams. You will also contribute to AI-driven security initiatives, support audits and assist with incident response, while mentoring junior colleagues and

Qualifications

• Experience with Microsoft Defender for Endpoint in an engineering setting.
• Solid track record with Microsoft Sentinel deployments and tuning.
• Azure cloud experience and security controls implementation.
• Strong skills in log collection, ingestion and SIEM integration.

Responsibilities

• Act as SME for Defender for Endpoint and ensure health and alignment with security requirements.
• Develop and improve Defender and Sentinel capabilities, including automation and monitoring coverage.
• Support onboarding of new apps and platforms with appropriate security monitoring.
• Help Security Operations meet KPIs, KRIs and operational standards.
• Assist with AI-driven security use cases and cross-team collaboration.
• Maintain log collection and integrations (e.g., Logstash).
• Support audits, control testing and investigations as needed.
• Mentor junior team members and promote security engineering best practices.

Skills

Microsoft Defender for Endpoint

Microsoft Sentinel

Azure Cloud

Log management

IaC tooling

Tools

Logstash

Job description

## Security Tooling EngineerApply: Stirling: Edinburgh: Full time: Posted Today: End Date: October 17, 2026 (15 days left to apply): R20476At M&G, our purpose is to give everyone real confidence to put their money to work. With a heritage dating back more than 175 years, we have a long history of innovation in savings and investments, combining asset management and insurance expertise to offer a wide range of solutions. Our two distinct operating segments, Asset Management and Life, work together to provide access to balanced, long-term investment and savings solutions. Through telling it like it is, owning it now and moving it forward together with care and integrity; we are creating an exceptional place to work for exceptional talent. We will consider flexible working arrangements for any of our roles and offer workplace adjustments to ensure you have the support you need to succeed in your role. The Security Tooling Engineer plays a key role in maintaining and evolving the organisation's security monitoring and endpoint protection capabilities. This role is responsible for providing subject matter expertise across Microsoft security technologies, with a particular focus on Microsoft Defender for Endpoint, while supporting the wider Security Operations Engineering function. **Primary Key Responsibilities** * Act as a subject matter expert for Microsoft Defender for Endpoint, ensuring the platform remains healthy, effective and aligned to evolving security requirements.* Develop, maintain and continuously improve Microsoft Defender and Microsoft Sentinel capabilities, including monitoring coverage, automation opportunities and operational effectiveness.* Support the onboarding of new applications, services and technology platforms, ensuring appropriate security monitoring and detection coverage is implemented.* Help ensure Security Operations Engineering services continue to meet agreed KPIs, KRIs and operational standards.* Additional Responsibilities* Support the exploration, development and deployment of AI-driven use cases within the Security Operations function.* Collaborate with technology teams, project teams and business stakeholders to embed security operations requirements into new and existing solutions.* Maintain and enhance security log collection and ingestion capabilities, including support for Logstash and associated integrations.* Support internal and external audits, control testing activities and assurance reviews.* Participate in incident response, investigations and operational support activities as required.* Mentor and support more junior members of the team, sharing knowledge and promoting best practices across security operations and engineering disciplines. **Key Experience Required** * Experience deploying, configuring and managing Microsoft security technologies, particularly Microsoft Defender for Endpoint.* Experience working with Microsoft Sentinel in an engineering environment.* Experience working within Azure cloud environments and supporting cloud security controls.* Experience working with log management, data ingestion and integration technologies.* Experience supporting audit, assurance or control testing activities.* Experience collaborating with a broad range of technical and non-technical stakeholders.* Experience with Infrastructure as Code (IaC) approaches and tooling is highly desirable.* Stakeholder management skills.* Highly organised, excellent prioritisation and planning skills* Strong written and verbal communication skills and ability to influence using risk-based reasoning.* Ability to work alone or as part of a team, whilst working on multiple items at the same time.* Ability to translate complex technical issues into meaningful details for non-specialist audiences.* Passion for innovation and creating solutions that make a positive difference.* You’re willing to take responsibility, creating better outcomes by stepping forward, using your judgement and making things happen.* Good verbal and written communication skills.* Excellent analytical skills and attention to detail.**What we offer:** We’re dedicated to supporting your wellbeing and helping you thrive, both at work and beyond. Our benefits are designed to help you balance your professional and personal life**,** and financially plan for the future. **Our UK benefits include**: * A valuable **pension scheme of up to 18%** (13% made up of employer contributions and 5% employee contributions).* Access to our **Share Save** and **Share Incentive Plan,** alongside financial wellbeing and support services to help **give you real confidence to put your money to work.*** Enjoy 38 days annual leave (including bank holidays), with the opportunity to purchase up to five extra days. Our **Time Off When You Need It** policy gives you the flexibility - to balance work and personal commitments.* Our market-leading **Inspiring Families** policy includes comprehensive support and paid parental leave covering maternity, adoption, surrogacy, and paternity leave - because supporting families is an important part of our inclusive culture.* Health & Protection cover includes **Private Healthcare, Critical Illness cover** and **Life Assurance** for you, with additional family options - for peace of mind. To explore more about life at M&G and our full benefits offering, visit **Life at M&G** At M&G we strive to have a diverse workforce and an inclusive culture, underpinned by our policies and employee-led networks that offer networking, support and development opportunities for the diverse communities our colleagues represent. We welcome applications from people of all backgrounds – across gender, ethnicity, age, disability, sexual orientation and more – including neurodivergent individuals, career returners and those with military service experience. M&G is proud to be **Level 3:** **Disability Confident Leader**under the UK Government Disability Confident employer scheme, and we welcome applications from candidates with disabilities and long-term health conditions. If you would like to participate in the initiative, you will have the opportunity to indicate this on your application. We are committed to providing an inclusive recruitment process. All candidates have the opportunity to request reasonable adjustments when applying. If you need any additional support at any stage, please contact us at: [e-mail]