Senior Security Engineer

Eligo Recruitment; Greater London; On-site; GBP 56,000 - 96,000; Full time

Job summary

We are seeking a technically hands‑on Senior Security Engineer for a leading UK retail organization undergoing a significant digital transformation. You will design, implement, and operate robust security controls across a complex hybrid environment, bridging strategy and execution with cross‑functional teams.

Key focus areas include enforcing CIS/NIST benchmarks, managing Entra ID/AD, and owning the SIEM/SOAR stack to support investigations and incident response.

Qualifications

• 5–10 years in cloud or infrastructure security roles.
• Deep experience with Defender for Cloud, Sentinel, and Azure security configurations.
• Strong knowledge of Entra ID, AD DS, RBAC, and hybrid identity security.
• Hands‑on experience with EDR, CSPM tools, and vulnerability management platforms.
• Understanding of Zero Trust and secure‑by‑design practices.
• Familiarity with PCI DSS, NIST, and ISO 27001 frameworks.
• Desirable: AWS security fundamentals and IaC security (Terraform, Bicep).
• Desirable: PowerShell or Python scripting.

Responsibilities

• Design and implement security controls across Azure, on‑prem, and SaaS.
• Define standards for Entra ID and Active Directory, including CA, MFA, SSO, PIM.
• Operate SIEM/SOAR stack (Microsoft Sentinel, Defender XDR) and develop detections.
• Enforce secure baselines across VMs, Windows Servers, and Azure IaaS.
• Manage PKI/AD CS lifecycle and data classification with Microsoft Purview.
• Collaborate on Azure Landing Zone security and secure firewall/VPN configurations.
• Support ISO 27001, PCI DSS, Cyber Essentials Plus audits and remediation tracking.

Skills

Cloud security

Defender for Cloud

Sentinel

Entra ID

RBAC

Hybrid identity security

EDR (MDE)

CSPM

Vulnerability management

Zero Trust

PCI DSS

NIST

ISO 27001

IaC security

Terraform

PowerShell

Python

Azure security configurations

Security architecture

Education

Bachelor's degree in Computer Science, Information Security, or equivalent experience

Tools

AWS

Active Directory

Azure

Cloud

DevSecOps

Firewall

Hyper-V

IAM

IaaS

Network

PowerShell

Python

RBAC

Terraform

VPN

VMware

Windows

Fabric

Job description

Salary: £56,000 - 96,000 per year

Requirements:

• 5–10 years in cloud or infrastructure security roles.
• Deep experience with Defender for Cloud, Sentinel, and Azure security configurations.
• Strong knowledge of Microsoft Entra ID, AD DS, RBAC, and hybrid identity security.
• Hands‑on experience with EDR (MDE), CSPM tools, and vulnerability management platforms.
• Practical understanding of Zero Trust architecture and secure‑by‑design methodologies.
• Familiarity with PCI DSS, NIST, and ISO 27001 frameworks.
• Awareness of AWS security fundamentals (Guard Duty, KMS, IAM Identity Center) (desirable).
• Experience with Infrastructure as Code (IaC) security (Terraform, Bicep) and DevSecOps practices (desirable).
• Scripting for automation using PowerShell or Python (desirable).
• Bachelors degree in Computer Science, Information Security, or equivalent experience.
• Preferred certifications include AZ-500, SC-300, SC-100, or CISSP/CCSP.
• Analytical mindset with the ability to remain composed under pressure during security incidents.
• Excellent communication skills to engage with diverse stakeholders across the technology organization.

Responsibilities:

• Design and implement security controls across Azure, on‑prem servers, and SaaS applications while maintaining hardening standards based on CIS and NIST benchmarks.
• Define standards for Entra ID and Active Directory, overseeing requirements for Conditional Access, MFA, SSO, and PIM.
• Own and operate the SIEM/SOAR stack, including Microsoft Sentinel and Defender XDR, to develop detection rules and support forensic investigations.
• Enforce secure baselines across virtualized environments (VMware/Hyper‑V), Windows Servers, and Azure IaaS workloads.
• Manage the certificate lifecycle (PKI/AD CS) and implement data classification and DLP strategies using Microsoft Purview.
• Manage Azure Landing Zone security and connectivity, collaborating with Network Engineering to validate secure firewall and VPN configurations.
• Support audit readiness for ISO 27001, PCI DSS, and Cyber Essentials Plus, ensuring all remediation progress is tracked and documented.

Technologies:

• AWS
• Active Directory
• Azure
• Cloud
• DevSecOps
• Firewall
• Hyper‑V
• IAM
• IaaS
• Support
• Network
• PowerShell
• Python
• RBAC
• Security
• Terraform
• VPN
• VMware
• Windows
• Fabric

More:

We are a leading UK retail organization undergoing a significant digital transformation. We seek a technical and hands‑on Senior Security Engineer to design, implement, and operate robust security controls across a complex hybrid environment. In this role, you will bridge the gap between strategy and execution and collaborate closely with Network, Infrastructure, and Application teams to ensure that secure‑by‑design solutions are integrated across the ecosystem. We value diversity and strive to create an inclusive environment for all our employees.

last updated 37 week of 2026