Security Tooling Engineer: Defender & Sentinel Specialist

M&G plc; Stirling, City of Edinburgh; Hybrid; GBP 70,000 - 110,000; Full time

Benefits offered by this job

pension up to 18%

Share Save Plan

Share Incentive Plan

38 days annual leave

Private Healthcare

Job summary

M&G plc is seeking a Security Tooling Engineer to maintain and evolve security monitoring and endpoint protection. You will be the SME for Microsoft Defender for Endpoint, while supporting Microsoft Sentinel and cloud security controls in Azure.

The role requires strong logging, data ingestion skills and collaboration across tech and business teams. You will also contribute to AI-driven security initiatives, support audits and assist with incident response, while mentoring junior colleagues and

Qualifications

• Experience with Microsoft Defender for Endpoint in an engineering setting.
• Solid track record with Microsoft Sentinel deployments and tuning.
• Azure cloud experience and security controls implementation.
• Strong skills in log collection, ingestion and SIEM integration.

Responsibilities

• Act as SME for Defender for Endpoint and ensure health and alignment with security requirements.
• Develop and improve Defender and Sentinel capabilities, including automation and monitoring coverage.
• Support onboarding of new apps and platforms with appropriate security monitoring.
• Help Security Operations meet KPIs, KRIs and operational standards.
• Assist with AI-driven security use cases and cross-team collaboration.
• Maintain log collection and integrations (e.g., Logstash).
• Support audits, control testing and investigations as needed.
• Mentor junior team members and promote security engineering best practices.

Skills

Microsoft Defender for Endpoint

Microsoft Sentinel

Azure Cloud

Log management

IaC tooling

Tools

Logstash

Job description

M&G plc is seeking a Security Tooling Engineer to maintain and evolve security monitoring and endpoint protection. You will be the SME for Microsoft Defender for Endpoint, while supporting Microsoft Sentinel and cloud security controls in Azure.

The role requires strong logging, data ingestion skills and collaboration across tech and business teams. You will also contribute to AI-driven security initiatives, support audits and assist with incident response, while mentoring junior colleagues and