Senior Azure Security Engineer - Defender XDR & Sentinel

CyberOne; City Of London; Hybrid; GBP 90,000 - 120,000; Full time

Job summary

CyberOne is seeking a Senior Azure Security Engineer to design, implement and support Microsoft security technologies across cloud, identity, endpoint and monitoring in a hybrid environment.

You will collaborate with Security Operations, Infrastructure and Cloud teams to strengthen controls, automate security processes and drive cyber resilience. Relevant Azure security certifications are preferred.

Qualifications

• Proven Azure security engineering experience in a large enterprise.
• Hands-on with Azure security services across IaaS, PaaS and hybrid.
• Experience with Microsoft Entra ID security and Conditional Access.
• Strong experience with Microsoft Sentinel and Defender XDR.
• Experience designing cloud security architecture and baselines.
• Experience developing KQL queries, analytics rules and playbooks.
• Experience with REST APIs, PowerShell, Python and automation.
• Collaboration with Security Operations, Incident Response, and Architecture teams.

Responsibilities

• Act as a Subject Matter Expert for Microsoft Azure security, Microsoft Sentinel, Microsoft Defender XDR.
• Design, implement and support enterprise security controls across Azure, Entra ID and the Microsoft security ecosystem.
• Engineer and maintain Microsoft Sentinel capabilities, including data connectors, analytics rules, KQL queries, workbooks, watchlists, automation rules and playbooks.
• Design, implement and optimise Defender capabilities, including Defender for Endpoint, Defender for Identity, Defender for Cloud, Defender for Office 365 and Defender XDR.
• Develop security monitoring use cases, threat detections and hunting queries aligned to business risks, threat intelligence and MITRE ATT&CK.
• Design secure cloud and hybrid architecture patterns and provide practical technical guidance to projects and engineering teams.
• Engineer telemetry and logging solutions using Azure Monitor, Log Analytics, Azure Monitor Agent, Data Collection Rules, custom tables and API-based integrations.
• Design and implement security automation using Logic Apps, Azure Functions, REST APIs, PowerShell and Python.
• Perform technical security assessments and review cloud solutions against enterprise security standards, control requirements and secure-by-design principles.
• Implement and maintain cloud security baselines, hardening standards, policy controls and configuration-management practices.
• Support vulnerability and configuration-risk remediation across Azure and Microsoft security platforms.
• Support cyber incident investigations and provide security expertise during critical incidents and major technology changes.
• Produce and maintain High-Level Designs, Low-Level Designs, engineering standards, operating procedures, support documentation and implementation records.
• Lead platform enhancements, proof-of-concepts, migrations, upgrades, troubleshooting and service-improvement activities.
• Build platform health monitoring, operational dashboards and KPI/KRI reporting for the Proactive Security function.

Skills

Azure security

Microsoft Sentinel

Microsoft Defender XDR

KQL queries

PowerShell

Python

Logic Apps

REST APIs

Automation

Security monitoring

Education

Bachelor's degree

AZ-500

SC-200

SC-100/SC-300 optional

Tools

Azure Monitor

Log Analytics

Azure Arc

Key Vault

Azure Policy

Defender for Cloud

Defender for Endpoint

Job description

CyberOne is seeking a Senior Azure Security Engineer to design, implement and support Microsoft security technologies across cloud, identity, endpoint and monitoring in a hybrid environment.

You will collaborate with Security Operations, Infrastructure and Cloud teams to strengthen controls, automate security processes and drive cyber resilience. Relevant Azure security certifications are preferred.