Security Engineer

Security Engineer

Cardiff/Hybrid

Up to £45,000

CPS Group are working with a leading Microsoft-focused security partner who are looking to add a Security Engineer to their growing Cyber Security Delivery Team.

This is a great opportunity for someone with experience in cyber security, SOC, IT support or technical delivery who enjoys working with clients and wants to build their expertise across the Microsoft security stack.

As a Security Engineer, you'll act as a technical point of contact for clients, helping them get the most from their Microsoft security solutions. You'll work closely with the wider Delivery and Engineering teams, providing practical advice, investigating issues and making security improvements across client environments.

You'll work with technologies including Microsoft Defender XDR, Microsoft Entra, Defender for Cloud Apps, Exchange Online and Microsoft Sentinel.

What you'll be doing

Building strong relationships with clients and acting as a trusted technical point of contact

Supporting client calls and explaining technical issues and recommendations clearly

Assessing incoming technical requests to ensure they are appropriate, in scope and aligned with best practice

Configuring and tuning Microsoft security controls, including Defender policies, Entra settings and Exchange Online security

Building and maintaining detection capabilities using KQL, Advanced Hunting and Microsoft Sentinel

Managing phishing simulation campaigns and supporting vulnerability scanning

Reviewing client environments and identifying opportunities to improve their Microsoft 365 security posture

Supporting incident response activities and security investigations

Producing clear technical reports, recommendations and documentation

Working with senior engineers to triage and escalate more complex technical issues

Where applicable, using scripting and automation such as Python, Bicep, ARM, JSON or YAML to improve processes and efficiency

What we're looking for

We're looking for someone with a genuine interest in cyber security, strong communication skills and the technical ability to work confidently with clients.

You'll ideally have:

Experience in a security or technical environment, such as SOC, Security Engineering, IT Support or Technical Delivery

Working knowledge of Microsoft security technologies, particularly Defender XDR, Entra, Defender for Cloud Apps and Exchange Online

Strong knowledge of KQL and Advanced Hunting

Experience with Microsoft Sentinel, including analytics rules and Content Hub solutions

Good understanding of security protocols, standards and best practices

Knowledge of vulnerability management and risk analysis

Strong technical judgement and the ability to recognise when an issue needs to be escalated

Excellent communication skills, with the ability to explain technical information to both technical and non-technical audiences

Strong written skills and experience producing technical documentation or reports

A proactive and curious approach, with a genuine desire to continue developing your technical skills

A degree in Computer Science, Cyber Security or a related subject would be beneficial, although equivalent professional experience will also be considered.

It would be great if you also have experience with:

Python, Bicep, ARM, JSON or YAML

Azure Logic Apps, Azure Functions or codeless playbooks

Jinja2

Microsoft certifications such as SC-200, SC-300, SC-401, MS-102 or AZ-500

Contact: Zach Bennett - CPS Group

By applying to this advert you are giving CPS Group (UK) Ltd authority to hold and process your data for this specific role and any other roles we may deem suitable to you over time. We will not pass your data to any third party without your verbal or written permission to do so. All incoming and outgoing calls are recorded for training and compliance purposes. CPS Group (UK) Ltd is acting as an Employment Agency in relation to this vacancy. Our new privacy policy can be found here (url removed)