Senior Cloud Security Engineer - Azure & M365 Hybrid

Searchability; City Of London; Hybrid; GBP 90,000 - 120,000; Full time

Job description

Senior Cyber Security andamp; Cloud Engineer

Location: London
Working pattern: Hybrid – 4 days in the office during probation, reducing to 3 days afterwards
Hours: 40 hours per week, Monday-Friday, within 9am-6pm

ABOUT THE OPPORTUNITY

We’re working with a London-based managed IT services.

They’re looking for a Senior Cyber Security andamp; Cloud Engineer to take ownership of security services and Microsoft cloud projects across their client base. This is a hands‑on, client‑facing role combining incident response, Microsoft 365 and Azure engineering, major migrations and security consultancy.

You’ll help shape technical standards, lead complex implementations and act as the escalation point for engineers and clients.

THE ROLE

You’ll lead managed security services covering detection and response, identity threats and SIEM, including client onboarding, detection tuning, alert triage alongside the NOC/SOC, and reporting.

Alongside this, you’ll design secure Microsoft cloud environments and deliver migrations from initial discovery through to cutover and handover.

Your responsibilities will include:

• Leading security incident investigations, containment and recovery, producing root cause reports and running twice‑yearly incident response drills.

• Designing and maintaining Entra ID security, including Conditional Access, MFA, privileged access, SSO and hybrid identity.

• Securing Microsoft 365 environments across Defender XDR, Intune, Exchange Online and Purview, with measurable improvements to Secure Scores.

• Designing and delivering Azure infrastructure, including virtual machines, Azure Virtual Desktop, networking, storage, backup and disaster recovery.

• Leading Microsoft 365 tenant‑to‑tenant, Google Workspace to Microsoft 365, SharePoint/OneDrive and on‑premises‑to‑Azure migrations.

• Planning migrations with minimal downtime, tested rollback procedures and secure, cost‑efficient environments.

• Delivering Cyber Essentials and Cyber Essentials Plus assessments and remediation, alongside supporting the ISO 27001 information security management system.

• Conducting vulnerability assessments and security posture reviews, translating findings into prioritised remediation plans.

• Establishing security baselines across cloud platforms, firewalls, networks, servers and endpoints.

• Explaining technical risks to clients, contributing to quarterly reviews and mentoring other engineers.

WHAT WE’RE LOOKING FOR

• At least 5 years’ experience in IT infrastructure or cyber security, including 3 years within an MSP or similar multi‑client environment.

• Strong hands‑on Microsoft 365 and Entra ID expertise, particularly Conditional Access, Intune, Defender XDR and Exchange Online.

• Solid Azure experience covering IaaS, networking, Azure Virtual Desktop, backup and recovery.

• A track record of leading substantial Microsoft 365 and Azure migrations, using tools such as BitTitan MigrationWiz, ShareGate or Azure Migrate.

• Proven incident response experience and practical experience operating EDR, ITDR and SIEM platforms such as Huntress, Microsoft Defender or Sentinel.

• Strong knowledge of firewalls, networking and infrastructure security.

• A good understanding of Cyber Essentials, Cyber Essentials Plus, ISO 27001 and GDPR.

• The confidence to own technical delivery and explain security risks to non‑technical stakeholders.

DESIRABLE EXPERIENCE

• Microsoft certifications such as SC-200, SC-300, AZ-104, AZ-500 or MS-102.

• PowerShell and Microsoft Graph scripting.

• KQL for Microsoft Sentinel or Defender threat hunting.

• Experience supporting creative‑sector platforms such as LucidLink, Nasuni or Egnyte.

WHAT SUCCESS LOOKS LIKE

Within your first 90 days, you’ll understand the client environments and tooling, join the security escalation process and agree a Microsoft 365 and Entra security baseline.

By six months, you’ll be rolling that baseline out across clients and managing incidents through to clear root cause reporting. Over your first year, you’ll deliver measurable security improvements and become a trusted authority for cloud and security across the team.

BENEFITS

• 22 days’ annual leave plus bank holidays, increasing to 25 days over your first three years.

• Funded professional development and certification costs.

• Quarterly and annual staff awards.

• Funded social events and referral bonuses.

• Hybrid working following the office attendance pattern above.

Applications are welcomed from all backgrounds, and reasonable adjustments are available throughout the recruitment process.