Senior Microsoft Security Engineer (XDR, IRM, Deception Engineering)

Reference: jkk09mx59hzbgx1os2nc

We are seeking a Senior Security Engineer to design, implement and continuously improve enterprise security capabilities across extended detection and response (XDR), incident response management (IRM) and deception engineering. This role will help strengthen the organisation’s ability to identify, contain and recover from sophisticated cyber threats, while improving the quality, speed and consistency of security operations. You will work closely with security operations, infrastructure, identity, cloud, application and risk teams to translate threat intelligence and business requirements into practical defensive controls.

Responsibilities will include developing and tuning detection rules, analytics, automation and response playbooks across endpoint, identity, email, cloud and network telemetry. You will lead or support complex investigations, threat hunting, malware and attack-path analysis, post-incident reviews and remediation tracking. The role will also involve defining incident response processes, exercising crisis procedures and advising stakeholders during high-severity events. You will design and manage deception capabilities, such as decoy identities, systems, services and data, using them to increase attacker visibility, generate high-confidence alerts and validate defensive assumptions. Regular reporting on control effectiveness, emerging threats, investigation outcomes and improvement opportunities will be expected.

Applicants should have substantial experience in security engineering, detection and response, threat hunting or digital forensics, with a strong understanding of modern attack techniques and the MITRE ATT&CK framework. Practical expertise with XDR and SIEM platforms, endpoint protection, identity security, cloud security, scripting and security automation is essential. Experience building incident response plans, analysing complex telemetry and deploying deception technologies would be highly valuable. Relevant industry certifications or equivalent hands-on experience are welcome. You will need strong communication and stakeholder-management skills, a methodical approach to problem solving, and the ability to work independently while providing technical leadership in a fast-changing environment. A commitment to continuous learning and improving defensive maturity is essential.

COMPETITIVE SALARY
Added 28/09/2026
Reference: jkk09mx59hzbgx1os2nc

Senior Microsoft Security Engineer (XDR, IRM, Deception Engineering)

London, England, United Kingdom Permanent Security Engineer

Other similar jobs

Associate Manager - Cyber Security Incident Response

Added 23/09/2026

We are seeking an experienced Associate Manager – Cyber Security Incident Response to help protect critical systems, data and services from evolving cyber threats. In this role, you will support the management of security incidents from initial detection through to containment, eradication and recovery, ensuring that response activities are coordinated, timely and well documented. You will work closely with security operations, infrastructure, applications, risk, legal, privacy and business stakeholders to assess impact, determine priorities and guide effective remediation. Your responsibilities will include overseeing the triage and investigation of suspected security incidents, validating alerts and coordinating appropriate escalation. You will help...

Learn more

Defence Security Virtual Practice Leader

Added 08/09/2026

We are seeking an experienced Defence Security Virtual Practice Leader to shape and lead a specialist security practice supporting complex defence and national security programmes. This senior role will provide strategic direction, technical leadership and operational oversight across virtualised environments, cloud platforms, secure networks and mission-critical systems. You will work with senior stakeholders, delivery teams and technical specialists to ensure security practices align with regulatory obligations, organisational priorities and the evolving threat landscape. Key responsibilities will include defining and maintaining the practice strategy, governance framework, standards and delivery roadmap; leading the design and assurance of secure virtualisation and cloud solutions;...

Learn more

Associate Manager - Cyber Security Incident Response

Added 18/08/2026

We are seeking a proactive and skilled Associate Manager - Cyber Security Incident Response to join our dynamic team. In this role, you will be responsible for leading incident response efforts, managing the investigation and resolution of security incidents, and ensuring that timely and effective responses are executed. Your expertise will be crucial in identifying vulnerabilities, assessing risks, and implementing strategies to mitigate potential threats. You will work closely with cross-functional teams to develop and refine incident response plans, ensuring alignment with industry best practices and compliance requirements. Your duties will include monitoring security alerts, performing in-depth analysis of incidents,...

Learn more

Senior Security Engineer - Microsoft Sentinel & Defender XDR

Added 09/10/2026

We are seeking a Senior Security Engineer specialising in Microsoft Sentinel and Microsoft Defender XDR to design, implement and continuously improve cloud-based security monitoring and incident response capabilities. You will play a key role in protecting enterprise environments by developing effective detection strategies, improving visibility across Microsoft 365, Azure and endpoint platforms, and supporting the investigation and remediation of complex security incidents. Your responsibilities will include administering and optimising Microsoft Sentinel and Defender XDR, creating and tuning analytics rules, incident workflows, workbooks, automation rules and playbooks, and developing advanced hunting queries using Kusto Query Language (KQL). You will integrate security...

Learn more

Security Engineer - Microsoft Sentinel & Defender XDR (Various levels)

Added 29/09/2026

We are seeking Security Engineers at various levels to help design, implement and operate security monitoring and incident response capabilities using Microsoft Sentinel and Microsoft Defender XDR. You will work with security, infrastructure and application teams to improve the detection, investigation and remediation of cyber threats across cloud, hybrid and on-premises environments. This role offers the opportunity to contribute to security engineering projects while developing expertise across Microsoft security technologies. Responsibilities will include creating and tuning analytics rules, detection logic, automation playbooks and workbooks in Microsoft Sentinel; configuring and managing Microsoft Defender XDR capabilities across endpoints, identities, email, applications and...

Learn more

Security Engineer - Microsoft Sentinel & Defender XDR (Various levels)

Added 01/09/2026

We are seeking Security Engineers at various levels to design, implement, and improve cloud-based security monitoring and incident response capabilities using Microsoft Sentinel and Microsoft Defender XDR. You will help protect critical systems, applications, identities, and data by developing effective detection, investigation, and response solutions across the Microsoft security ecosystem. The role offers opportunities to work on both operational security and strategic improvement initiatives in a collaborative, technically focused environment. Responsibilities may include onboarding and normalising data sources in Microsoft Sentinel; developing and tuning analytics rules, automation rules, workbooks, dashboards, and playbooks; investigating alerts and incidents across Microsoft Defender XDR;...

Learn more

Senior Microsoft Identity Engineer (Entra ID and Microsoft 365)

Added 02/10/2026

We are seeking a Senior Microsoft Identity Engineer to design, implement and maintain secure identity services across Entra ID and Microsoft 365. This is a hands-on role for an experienced professional who can lead identity and access management initiatives, improve security controls and provide technical guidance across a complex cloud environment. You will work closely with infrastructure, security, applications and service teams to deliver reliable, scalable and well-governed identity solutions. Your responsibilities will include administering and optimising Entra ID, including users, groups, roles, administrative units, enterprise applications, service principals and conditional access policies. You will lead the design and support...

Learn more

Microsoft Security Platform Security Engineer

Added 24/09/2026

We are seeking a Security Platform Security Engineer to design, implement and maintain robust security capabilities across enterprise technology environments. This role will help protect identities, endpoints, cloud services, applications and data by developing effective security controls, improving operational resilience and supporting the organisation’s wider cyber-security strategy. You will work closely with infrastructure, engineering, architecture, compliance and incident response teams to identify risks and deliver practical, scalable solutions. Key responsibilities include configuring and administering security platforms, monitoring alerts and investigations, responding to incidents, and tuning detection and prevention controls. You will support identity and access management, endpoint protection, vulnerability management,...

Learn more

Microsoft Security Platform Security Engineer

Added 23/09/2026

We are seeking a Security Platform Security Engineer to design, implement and maintain secure, resilient identity, endpoint and cloud security capabilities across a complex technology environment. You will work closely with infrastructure, engineering, operations and governance teams to protect systems, applications and data while enabling secure business delivery. The role requires a practical understanding of modern security platforms, strong problem-solving skills and the ability to translate security requirements into reliable technical solutions. Your responsibilities will include deploying and administering security controls across cloud and on-premises environments; managing identity and access controls, privileged access, endpoint protection, vulnerability management and security monitoring;...

Learn more

Security Engineer – Microsoft Purview, Endpoint & Data Protection

Added 02/10/2026

We are seeking a Security Engineer specialising in Microsoft Purview, endpoint security and data protection to strengthen enterprise-wide information security capabilities. This role will design, implement and maintain controls that protect sensitive data across cloud services, endpoints, applications and collaboration platforms. You will work closely with security, infrastructure, compliance and business teams to translate regulatory and operational requirements into practical technical solutions. Key responsibilities will include configuring and administering Microsoft Purview capabilities such as sensitivity labels, data loss prevention policies, retention and records management, insider risk controls, audit features and information protection workflows. You will help develop and enforce endpoint...

Learn more

Security Engineer – Microsoft Purview, Endpoint & Data Protection

Added 02/10/2026

We are seeking a Security Engineer specialising in Microsoft Purview, endpoint security and data protection to help strengthen the organisation’s information security capabilities. In this role, you will design, implement and maintain security controls across Microsoft 365, endpoints and cloud environments, ensuring sensitive information is appropriately identified, classified, monitored and protected. You will work closely with infrastructure, identity, compliance and business teams to translate security requirements into practical, scalable solutions. Your responsibilities will include configuring and administering Microsoft Purview capabilities such as sensitivity labels, data loss prevention policies, retention policies, insider risk controls, information protection and audit functionality. You will...

Learn more

M365 Security Consultant ( M365 security, Defender, Sentinel and Microsoft security stack.)

Added 19/08/2026

We are seeking a skilled M365 Security Consultant with a strong focus on M365 security, Microsoft Defender, Sentinel, and the broader Microsoft security stack. In this critical role, you will be responsible for designing, implementing, and managing security solutions that protect our clients’ environments. You will work closely with cross-functional teams to assess security requirements, identify vulnerabilities, and recommend appropriate security measures. Your expertise will help in developing security policies, procedures, and best practices tailored to Microsoft 365 environments. The ideal candidate will have hands-on experience with Microsoft security technologies, particularly Defender for Endpoint, Microsoft Sentinel, and Azure Active Directory....

Learn more

Security Client Solutions & Growth Manager (Microsoft Security)

Added 23/09/2026

We are seeking a Security Client Solutions & Growth Manager to lead the development of security-focused client relationships and drive sustainable business growth. This role will work closely with customers, technology specialists, delivery teams and commercial stakeholders to understand complex security needs and translate them into practical, outcome-focused solutions. You will act as a trusted adviser throughout the client lifecycle, from early discovery and solution design through to proposal, implementation and ongoing account development. Key responsibilities will include identifying new opportunities, shaping account and growth strategies, managing a qualified pipeline, and contributing to bids, proposals and presentations. You will develop...

Learn more

Microsoft Security Consultant

Added 15/10/2026

We are seeking a Microsoft Security Consultant to help organisations strengthen their security posture across Microsoft cloud and enterprise technologies. This role will involve working with clients to understand their risk landscape, assess existing controls and design practical, sustainable security solutions. You will provide expert guidance across Microsoft Azure, Microsoft 365, Entra ID, Defender and related security services, supporting customers through both strategic planning and technical implementation. Key responsibilities will include conducting security assessments, developing roadmaps and advising on identity and access management, endpoint protection, cloud security, threat detection, data protection and security operations. You will configure and optimise Microsoft...

Learn more

Principal Security Consultant - Microsoft Azure

Added 09/10/2026

We are seeking a Principal Security Consultant specialising in Microsoft Azure to lead the design, delivery and continuous improvement of secure cloud environments. In this senior role, you will provide strategic security guidance to clients and internal stakeholders, helping organisations assess risk, strengthen their cloud posture and adopt secure, scalable technology solutions. You will act as a trusted adviser across complex programmes, translating business and technical requirements into practical security outcomes. Your responsibilities will include developing Azure security architectures, conducting cloud security assessments and maturity reviews, and defining security strategies, policies and standards. You will advise on identity and access...

Learn more
At least 8 characters, 1 uppercase, 1 lowercase and 1 special character or number
Your file must be a doc, docx or pdf. No larger than 5MB.