Senior Security Engineer (Defender, Purview, Sentinel)

Invitise; Greater London; Hybrid; GBP 100,000 - 125,000; Full time

Job summary

A consulting firm in the data sector is seeking a Senior Security Engineer based in London. This role involves hands-on remediation across Azure and endpoint environments, focusing on improving Defender for Cloud findings, closing vulnerabilities, and strengthening the security posture. The successful candidate should have extensive experience with Defender for Cloud and other Microsoft security technologies, along with relevant certifications such as AZ-500 and SC-100. The position offers a competitive contract with hybrid working arrangement, requiring attendance at the office three days a week.

Qualifications

• Experience with Defender for Cloud, Defender for Endpoint and EASM.
• Proficient in vulnerability remediation and Secure Score improvement.
• Familiarity with compliance uplift for ISO 27001, SOC 2, GDPR and NIS2.

Responsibilities

• Focus on hands-on remediation across Azure and endpoint environments.
• Improve Defender for Cloud findings and close vulnerabilities.
• Strengthen security posture and work on delivery-led tasks.

Skills

Defender for Cloud

Vulnerability remediation

PowerShell

Microsoft Graph

Cloud identity controls

Education

AZ-500 Certification

SC-100 Certification or working towards

MS-500, SC-400 or SC-900 Certification

Job description

We re looking for a Senior Security Engineer for our client in the data sector, based in London, on an initial 3 to 6 month contract paying up to GBP500 per day Outside IR35.

This role offers hybrid working with an expectation to attend the office 3 days per week.

You will focus on hands–on remediation across Azure and endpoint environments, improving Defender for Cloud findings, closing vulnerabilities, and strengthening security posture. The role is delivery–led and ideal for someone who enjoys fixing issues rather than only advising.

The successful Senior Security Engineer will have experience with:

• Defender for Cloud, Defender for Endpoint and EASM
• Vulnerability remediation and Secure Score improvement
• Purview (DLP, sensitivity labels, insider risk)
• Compliance uplift for ISO 27001, SOC 2, GDPR and NIS2
• Configuration hardening, patching and policy deployment
• Entra ID, Conditional Access, PIM and cloud identity controls
• PowerShell and Microsoft Graph for automation

Nice to have: Sentinel exposure, Zero Trust knowledge, regulated–sector experience.

Certifications required: AZ–500, SC–100 (or working towards), plus one of MS–500, SC–400 or SC–900.

Desirable: CCSP.

Interested?

Please apply below.

Senior Security Engineer, Azure Security Engineer, Cloud Security Engineer, Defender for Cloud, Defender for Endpoint, EASM, Purview, DLP, Conditional Access, PIM, Sentinel, Vulnerability Remediation, Cloud Hardening, London, Hybrid