Zero Trust Security Engineer — Entra ID & Automation

Broaden; Greater London; Hybrid; GBP 75,000 - 95,000; Full time

Job summary

Broaden in London is seeking a Cyber Security Engineer to own the Zero Trust platform, Entra ID governance, Defender XDR policy tuning, and data protection across a scale-up global insurance group. The role is hybrid with on-site 2–3 days per week.

The successful candidate will automate recurring security tasks, work with the MDR/XDR partner, and help standardise security posture for acquisitions, while building evidence pipelines for ISO 27001 and NIST CSF.

Qualifications

• Demonstrable hands-on security engineering experience.
• Experience working in multi-tenant or acquisition-led environments.
• Track record of working with external security partners (MDR/XDR).
• Certifications such as SC-200/SC-300/AZ-500 are desirable.
• Exposure to IaC (Bicep/Terraform) or Defender for Cloud is a plus.

Responsibilities

• Design and maintain identity and access controls across Entra ID estate.
• Automate security tasks and evidence gathering using PowerShell and Graph.
• Tune Defender XDR, Defender for Cloud, and Sentinel policies with MDR partner.
• Define Windows/macOS endpoint hardening baselines and enforce Purview DLP policies.
• Lead security onboarding for newly acquired entities and automate compliance evidence.

Skills

Security engineering

Automation mindset

Threat hunting

Communication

MSSP oversight

Tools

PowerShell

Microsoft Graph

Logic Apps

KQL

Sentinel

Entra ID

Microsoft Defender XDR

Defender for Cloud

Job description

Broaden in London is seeking a Cyber Security Engineer to own the Zero Trust platform, Entra ID governance, Defender XDR policy tuning, and data protection across a scale-up global insurance group. The role is hybrid with on-site 2–3 days per week.

The successful candidate will automate recurring security tasks, work with the MDR/XDR partner, and help standardise security posture for acquisitions, while building evidence pipelines for ISO 27001 and NIST CSF.