Job Description

Microsoft Security Engineer
Our client, a leading global supplier for IT services, requires Microsoft Security Engineer to be based at their client's office in London, UK.
This is a hybrid role - you can work remotely in the UK and attend the London office 2-3 days per week .
This is a 6+ month temporary contract to start asap
Day rate: Competitive Market rate
Our client, a leading global IT services provider, is seeking a highly skilled Microsoft Security Engineer to join their London based team. The successful candidate will play a key role in safeguarding digital assets by leveraging Microsoft's security suite, including Defender XDR, Purview, and Entra ID. You will be responsible for threat management, vulnerability hunting, identity and access security, data governance, and incident response, ensuring the organisation's overall security posture remains strong and compliant..
Key Responsibilities
Microsoft Defender XDR (Extended Detection & Response)

• Act as a subject matter expert for the Microsoft Defender suite.
• Manage and monitor Defender for Endpoint, Defender for Office 365, Defender for Identity, Defender for Cloud Apps, and Defender Vulnerability Management.
• Detect and respond to email, endpoint, and identity-based threats.
• Enforce security policies across cloud applications.
• Collaborate with internal teams and Microsoft Defender Experts for proactive threat hunting.
• Document incident response procedures and provide regular reports to leadership.

Microsoft Purview (Data Governance & Compliance)

• Design, implement, and manage Data Loss Prevention (DLP) policies to prevent unauthorized data sharing.
• Deploy and manage sensitivity labels, AIP/MPIP, and Information Protection policies.
• Configure Insider Risk Management (IRM) and Communication Compliance policies.
• Manage Data Lifecycle policies for retention and disposal.
• Support eDiscovery, legal hold, and audit investigations.
• Utilize Data Security Posture Management (DSPM) to identify and mitigate sensitive data risks, including in AI applications.

Microsoft Entra ID (Identity & Access Management)

• Manage and secure user, group, and workload identities.
• Administer App & Enterprise App registrations and B2B/B2C guest access.
• Develop and enforce Conditional Access (CA) policies, including MFA, device, and location-based controls.
• Implement Privileged Identity Management (PIM) and Privileged Access Management (PAM) to enforce least privilege and just-in-time access.
• Configure authentication protocols (SAML, OAuth, OIDC, SCIM) for application and service integration.
• Enable secure device access, including BYOD policies.

Key Requirements
Experience: 8-10 years in cybersecurity with a focus on Microsoft security solutions
Technical Expertise:

• Strong hands-on knowledge of Defender XDR, Purview, and Entra ID.
• Experience managing identity, access, and compliance solutions within Microsoft 365 and Azure ecosystems.
• Proficiency with PowerShell scripting for automation and security configuration.
• Familiarity with MITRE ATT&CK framework and other cybersecurity methodologies.

Education: Bachelor's degree in Cybersecurity, IT, Computer Science, or related field.
Certifications (Preferred):

• Microsoft Certified: Security Operations Analyst Associate (SC-200)
• Microsoft Certified: Identity and Access Administrator Associate (SC-300)
• Microsoft Certified: Information Protection Administrator Associate (SC-400)
• CISSP (Certified Information Systems Security Professional)

Soft Skills

• Excellent analytical and problem-solving abilities.
• Strong communication and collaboration skills, able to work with technical and non-technical stakeholders.
• Proactive mindset with the ability to adapt to an evolving threat landscape.

Due to the volume of applications received, unfortunately we cannot respond to everyone.
If you do not hear back from us within 7 days of sending your application, please assume that you have not been successful on this occasion.
Please do keep an eye on our website for future roles.

Skills Required