Senior Azure Security Engineer

Senior Azure Security Engineer – Hybrid (London office 1 day per month) Full-time | Cyber Security | Hybrid, with one day a month in the London office

About the role If you enjoy building and tuning Microsoft security tooling in a large, complex environment, this role puts you at the centre of it. You will join the Cyber Security team as the go-to expert for Azure security, Microsoft Sentinel and Defender XDR, working alongside Security Operations, Infrastructure, Cloud Engineering, Architecture, Identity and Application teams. You will shape how the organisation secures and monitors its hybrid estate, and help it stay resilient.

What you’ll be doing

• Design, implement and support security controls across Azure, Microsoft Entra ID and the wider Microsoft security ecosystem

• Engineer and maintain Microsoft Sentinel, including data connectors, analytics rules, KQL queries, workbooks, watchlists and playbooks

• Deploy and optimise Defender for Endpoint, Identity, Cloud and Office 365 within Defender XDR

• Build detections and hunting queries aligned to business risk, threat intelligence and MITRE ATT&CK

• Automate security processes with Logic Apps, Azure Functions, REST APIs, PowerShell and Python

• Review cloud solutions against security standards, support incident investigations, and produce clear high-level and low-level designs and operating procedures

What we’re looking for

• Proven Azure security engineering experience in a large enterprise, across IaaS, PaaS and hybrid environments (essential)

• Strong hands-on Microsoft Sentinel and Defender XDR experience, including KQL, analytics rules and threat-hunting content (essential)

• Practical Microsoft Entra ID security experience, including Conditional Access, Privileged Identity Management and Identity Protection (essential)

• Experience onboarding and validating telemetry using Azure Monitor, Log Analytics and Data Collection Rules

• Comfort with automation, troubleshooting and operational support, and with working across technical teams

• Desirable: Azure landing zone security, SOAR, Zero Trust, regulated financial services, or exposure to AWS or GCP. AZ-500 and SC-200 are strongly preferred; SC-100, SC-300, AZ-104, CISSP, CCSP or GIAC are a plus

What you get

• A senior technical role as subject matter expert across Azure and Microsoft security

• Hybrid working, with just one day a month in the London office

• The chance to lead platform enhancements, proofs of concept, migrations and upgrades

• Close collaboration with security, cloud, identity and architecture colleagues

• Ownership of platform health monitoring and KPI/KRI reporting for the Proactive Security function

This role suits A hands-on security engineer who wants depth in the Microsoft stack and is happy to guide project and engineering teams towards secure design.