Security Engineer - Microsoft Sentinel & Defender XDR (Various levels)

Reference: 2oz4o0h1lie6vjehs0zh

We are seeking Security Engineers at various levels to help design, implement and operate security monitoring and incident response capabilities using Microsoft Sentinel and Microsoft Defender XDR. You will work with security, infrastructure and application teams to improve the detection, investigation and remediation of cyber threats across cloud, hybrid and on-premises environments. This role offers the opportunity to contribute to security engineering projects while developing expertise across Microsoft security technologies.

Responsibilities will include creating and tuning analytics rules, detection logic, automation playbooks and workbooks in Microsoft Sentinel; configuring and managing Microsoft Defender XDR capabilities across endpoints, identities, email, applications and cloud workloads; and investigating alerts, incidents and emerging threats. You will support threat hunting, vulnerability and exposure analysis, security use-case development, and the integration of data sources through connectors, APIs and relevant security tooling. You will also help establish operational procedures, improve incident response processes, document technical solutions and provide recommendations that strengthen overall security posture. More experienced engineers may lead technical designs, mentor colleagues and contribute to security architecture, governance and continuous improvement initiatives.

We welcome applications from candidates ranging from developing practitioners to senior security engineers. You should have practical experience in cybersecurity, security operations, cloud security, systems administration or a related discipline, with knowledge of Microsoft Sentinel, Defender XDR or comparable SIEM, XDR and endpoint security platforms. Familiarity with Kusto Query Language (KQL), PowerShell, Microsoft Entra ID, Azure services, detection engineering, incident response and security automation is highly desirable. Strong analytical, troubleshooting and communication skills are essential, along with the ability to work collaboratively and explain technical issues clearly to both technical and non-technical audiences. Relevant certifications such as SC-200, AZ-500, AZ-104 or equivalent experience are advantageous. Senior-level candidates should also demonstrate experience delivering complex security solutions and working with stakeholders to translate business risks into effective technical controls.

COMPETITIVE SALARY
Added 29/09/2026
Reference: 2oz4o0h1lie6vjehs0zh

Security Engineer - Microsoft Sentinel & Defender XDR (Various levels)

London, England, United Kingdom Permanent Security Engineer

Other similar jobs

Security Engineer - Microsoft Sentinel & Defender XDR (Various levels)

Added 01/09/2026

We are seeking Security Engineers at various levels to design, implement, and improve cloud-based security monitoring and incident response capabilities using Microsoft Sentinel and Microsoft Defender XDR. You will help protect critical systems, applications, identities, and data by developing effective detection, investigation, and response solutions across the Microsoft security ecosystem. The role offers opportunities to work on both operational security and strategic improvement initiatives in a collaborative, technically focused environment. Responsibilities may include onboarding and normalising data sources in Microsoft Sentinel; developing and tuning analytics rules, automation rules, workbooks, dashboards, and playbooks; investigating alerts and incidents across Microsoft Defender XDR;...

Learn more

Senior Security Engineer - Microsoft Sentinel & Defender XDR

Added 09/10/2026

We are seeking a Senior Security Engineer specialising in Microsoft Sentinel and Microsoft Defender XDR to design, implement and continuously improve cloud-based security monitoring and incident response capabilities. You will play a key role in protecting enterprise environments by developing effective detection strategies, improving visibility across Microsoft 365, Azure and endpoint platforms, and supporting the investigation and remediation of complex security incidents. Your responsibilities will include administering and optimising Microsoft Sentinel and Defender XDR, creating and tuning analytics rules, incident workflows, workbooks, automation rules and playbooks, and developing advanced hunting queries using Kusto Query Language (KQL). You will integrate security...

Learn more

Senior Cyber Security Consultant

Added 15/10/2026

We are seeking a Senior Cyber Security Consultant to provide expert advice and practical support across a diverse portfolio of clients and projects. You will help organisations understand, manage and reduce their cyber security risks, translating complex technical issues into clear, commercially focused recommendations. This is a client-facing role requiring strong communication skills, sound judgement and the ability to work effectively with stakeholders at all levels. Your responsibilities will include leading cyber security assessments, developing and reviewing security strategies, and advising on governance, risk and compliance. You will contribute to security architecture reviews, threat and vulnerability assessments, incident readiness, third-party...

Learn more

M365 Security Consultant ( M365 security, Defender, Sentinel and Microsoft security stack.)

Added 19/08/2026

We are seeking a skilled M365 Security Consultant with a strong focus on M365 security, Microsoft Defender, Sentinel, and the broader Microsoft security stack. In this critical role, you will be responsible for designing, implementing, and managing security solutions that protect our clients’ environments. You will work closely with cross-functional teams to assess security requirements, identify vulnerabilities, and recommend appropriate security measures. Your expertise will help in developing security policies, procedures, and best practices tailored to Microsoft 365 environments. The ideal candidate will have hands-on experience with Microsoft security technologies, particularly Defender for Endpoint, Microsoft Sentinel, and Azure Active Directory....

Learn more

Senior Microsoft Security Engineer (XDR, IRM, Deception Engineering)

Added 28/09/2026

We are seeking a Senior Security Engineer to design, implement and continuously improve enterprise security capabilities across extended detection and response (XDR), incident response management (IRM) and deception engineering. This role will help strengthen the organisation’s ability to identify, contain and recover from sophisticated cyber threats, while improving the quality, speed and consistency of security operations. You will work closely with security operations, infrastructure, identity, cloud, application and risk teams to translate threat intelligence and business requirements into practical defensive controls. Responsibilities will include developing and tuning detection rules, analytics, automation and response playbooks across endpoint, identity, email, cloud and...

Learn more

Senior Microsoft Identity Engineer (Entra ID and Microsoft 365)

Added 02/10/2026

We are seeking a Senior Microsoft Identity Engineer to design, implement and maintain secure identity services across Entra ID and Microsoft 365. This is a hands-on role for an experienced professional who can lead identity and access management initiatives, improve security controls and provide technical guidance across a complex cloud environment. You will work closely with infrastructure, security, applications and service teams to deliver reliable, scalable and well-governed identity solutions. Your responsibilities will include administering and optimising Entra ID, including users, groups, roles, administrative units, enterprise applications, service principals and conditional access policies. You will lead the design and support...

Learn more

Senior SOC Engineer (Sentinel One)

Added 06/10/2026

We are seeking a Senior SOC Engineer to strengthen a security operations function responsible for protecting critical systems, networks, applications, and data. In this role, you will provide advanced technical expertise across security monitoring, incident detection, investigation, and response, with a particular focus on SentinelOne and endpoint protection capabilities. You will work closely with security analysts, infrastructure teams, and other technical stakeholders to identify threats, contain incidents, and improve the organisation’s overall security posture. Your responsibilities will include tuning and maintaining SentinelOne policies, detection rules, alerts, and response workflows; investigating complex endpoint and network security events; leading or supporting incident...

Learn more

Security Engineering & Cloud / Application Security (All Levels) - UK Wide

Added 04/09/2026

We are seeking Security Engineering and Cloud/Application Security professionals at all levels to join a growing team working on complex, business-critical technology environments across the UK. Whether you are an experienced security engineer, a cloud security specialist, an application security practitioner, or building your career in cyber security, you will have the opportunity to contribute to meaningful projects and develop your technical expertise. You will help design, implement and improve security controls across cloud platforms, applications, infrastructure and development pipelines. Responsibilities may include conducting threat modelling and security reviews; identifying and managing vulnerabilities; supporting secure architecture and design decisions; integrating...

Learn more

Operational Technology Cyber Security Consultant (All Levels)

Added 02/09/2026

We are seeking Operational Technology Cyber Security Consultants at all levels to support the assessment, design and improvement of cyber security across industrial control systems, operational technology (OT) environments and critical infrastructure. You will work with clients and internal stakeholders to understand their operational needs, identify cyber risks and develop practical, risk-based solutions that protect safety, availability and business continuity. The role offers opportunities for professionals ranging from early-career consultants to experienced specialists and technical leads. Responsibilities may include conducting OT cyber security assessments, maturity reviews and gap analyses; developing and implementing security strategies, policies, standards and roadmaps; supporting network...

Learn more

Operational Technology Cyber Security Consultant (All Levels)

Added 01/09/2026

We are seeking Operational Technology Cyber Security Consultants at all levels to support the protection and resilience of industrial control systems, operational technology (OT) environments and critical infrastructure. Working with clients across complex and highly regulated sectors, you will help assess cyber risk, strengthen security capabilities and deliver practical solutions that protect safe, reliable operations. This is an opportunity for professionals ranging from developing consultants to experienced specialists who want to work on varied, technically challenging assignments. Responsibilities may include conducting OT and industrial control system security assessments, identifying vulnerabilities and evaluating risks across networks, devices, applications and supporting processes....

Learn more

Microsoft Security Platform Security Engineer

Added 24/09/2026

We are seeking a Security Platform Security Engineer to design, implement and maintain robust security capabilities across enterprise technology environments. This role will help protect identities, endpoints, cloud services, applications and data by developing effective security controls, improving operational resilience and supporting the organisation’s wider cyber-security strategy. You will work closely with infrastructure, engineering, architecture, compliance and incident response teams to identify risks and deliver practical, scalable solutions. Key responsibilities include configuring and administering security platforms, monitoring alerts and investigations, responding to incidents, and tuning detection and prevention controls. You will support identity and access management, endpoint protection, vulnerability management,...

Learn more

Microsoft Security Platform Security Engineer

Added 23/09/2026

We are seeking a Security Platform Security Engineer to design, implement and maintain secure, resilient identity, endpoint and cloud security capabilities across a complex technology environment. You will work closely with infrastructure, engineering, operations and governance teams to protect systems, applications and data while enabling secure business delivery. The role requires a practical understanding of modern security platforms, strong problem-solving skills and the ability to translate security requirements into reliable technical solutions. Your responsibilities will include deploying and administering security controls across cloud and on-premises environments; managing identity and access controls, privileged access, endpoint protection, vulnerability management and security monitoring;...

Learn more

Security Engineer – Microsoft Purview, Endpoint & Data Protection

Added 02/10/2026

We are seeking a Security Engineer specialising in Microsoft Purview, endpoint security and data protection to help strengthen the organisation’s information security capabilities. In this role, you will design, implement and maintain security controls across Microsoft 365, endpoints and cloud environments, ensuring sensitive information is appropriately identified, classified, monitored and protected. You will work closely with infrastructure, identity, compliance and business teams to translate security requirements into practical, scalable solutions. Your responsibilities will include configuring and administering Microsoft Purview capabilities such as sensitivity labels, data loss prevention policies, retention policies, insider risk controls, information protection and audit functionality. You will...

Learn more
At least 8 characters, 1 uppercase, 1 lowercase and 1 special character or number
Your file must be a doc, docx or pdf. No larger than 5MB.