Senior Security Engineer (Defender, PurView)

InvitISE Ltd; England; Hybrid; GBP 79,796 - 104,703; Part time

Job summary

A data sector client is seeking a Senior Security Engineer responsible for hands-on remediation across Azure and endpoint environments. The role requires improving security posture and compliance with relevant standards. Ideal candidates will possess certifications such as AZ-500 and SC-100. This hybrid position has an expectation of office attendance three days a week, and it offers competitive pay of up to £500 per day outside IR35.

Qualifications

• Hands-on remediation across Azure and endpoint environments.
• Experience with Defender for Cloud and Defender for Endpoint.
• Understanding of compliance frameworks like GDPR.

Responsibilities

• Improve security posture through hands-on remediation.
• Close vulnerabilities identified in Defender for Cloud.
• Deliver compliance uplift for ISO 27001 and GDPR.

Skills

Defender for Cloud

Vulnerability remediation

Compliance (ISO 27001, SOC 2, GDPR)

PowerShell

Microsoft Graph

Education

Certifications: AZ-500, SC-100, MS-500/SC-400/SC-900

Job description

Senior Security Engineer (Defender, PurView)

We’re looking for a Senior Security Engineer for our client in the data sector, based in London, on an initial 3 to 6 month contract paying up to £500 per day Outside IR35.

This role offers hybrid working with an expectation to attend the office 3 days per week.

You will focus on hands‑on remediation across Azure and endpoint environments, improving Defender for Cloud findings, closing vulnerabilities and strengthening security posture. The role is delivery‑led and ideal for someone who enjoys fixing issues rather than only advising.

Responsibilities

• Defender for Cloud, Defender for Endpoint and EASM
• Vulnerability remediation and Secure Score improvement
• Purview (DLP, sensitivity labels, insider risk)
• Compliance uplift for ISO 27001, SOC 2, GDPR and NIS2
• Configuration hardening, patching and policy deployment
• Entra ID, Conditional Access, PIM and cloud identity controls
• PowerShell and Microsoft Graph for automation

Nice to have: Sentinel exposure, Zero Trust knowledge, regulated‑sector experience.

Certifications required: AZ‑500, SC‑100 (or working towards), plus one of MS‑500, SC‑400 or SC‑900.