Security Tooling Engineer: Defender & Sentinel Expert

Prudential Distribution Ltd; Scotland; On-site; GBP 80,000 - 110,000; Full time

Benefits offered by this job

Pension up to 18%

Share Save and SIP

38 days annual leave

Time off when you need it

Inspiring Families policy

Private Healthcare

Job summary

M&G is seeking a Security Tooling Engineer to maintain and evolve security monitoring and endpoint protection. You will act as SME for Microsoft Defender for Endpoint, drive Defender and Sentinel capabilities, and support onboarding of new technologies with robust monitoring and detection coverage.

The role involves collaboration across Technology & Security Operations, with a focus on cloud security, log management and incident response, while contributing to audits and continuous

Qualifications

• Experience deploying Microsoft security tech, especially Defender for Endpoint.
• Experience with Microsoft Sentinel in engineering environments.
• Azure cloud security controls experience.
• Knowledge of log management and data ingestion technologies.
• Experience with audit or control testing activities.
• Strong collaboration with diverse stakeholders.
• IaC tooling experience is desirable.

Responsibilities

• Act as SME for Defender for Endpoint, ensuring health and coverage.
• Develop and improve Defender and Sentinel capabilities, incl. automation.
• Onboard new apps and services with proper security monitoring.
• Ensure KPIs and operational standards for Security Operations.

Skills

Microsoft Defender for Endpoint

Microsoft Sentinel

Azure cloud security

Log management

IaC tooling

Stakeholder engagement

Security incident response

Risk-based communication

Tools

Logstash

Azure security center

Defender for Endpoint

Job description

M&G is seeking a Security Tooling Engineer to maintain and evolve security monitoring and endpoint protection. You will act as SME for Microsoft Defender for Endpoint, drive Defender and Sentinel capabilities, and support onboarding of new technologies with robust monitoring and detection coverage.

The role involves collaboration across Technology & Security Operations, with a focus on cloud security, log management and incident response, while contributing to audits and continuous