The Role

As a Security Engineer, you will act as a trusted technical partner to clients, combining strong security knowledge with the communication skills to explain technical concepts clearly.

Working within a Cyber Security Delivery Team, you will support clients with technical queries, research and provide practical recommendations, and help them maximise their Microsoft security investments.

The position is primarily remote, with occasional attendance required in the Cardiff office. This is expected to be around a couple of times per month, depending on business requirements.

You will support the day-to-day client relationship as the technical point of contact, joining client calls where required to explain options, answer technical questions and provide clear guidance. You will work across the Microsoft security ecosystem, including Microsoft Defender XDR, Microsoft Entra, Microsoft Defender for Cloud Apps, Exchange Online and Microsoft Sentinel. You will also have access to senior engineering support as you continue to develop your expertise.

A key part of the role will be reviewing and validating technical requests before work begins. You will assess whether requests are in scope, technically appropriate and aligned with security best practice. Where appropriate, you will implement changes directly within client environments. More complex requirements will be triaged and escalated to senior engineering teams.

Key Responsibilities

• Build strong client relationships as a trusted technical contact
• Support client calls and translate technical concepts into practical recommendations
• Assess incoming requests for scope, suitability and best practice
• Configure and tune Microsoft security controls within client environments
• Manage Defender policies, Entra settings and Exchange security configurations
• Configure and maintain Defender for Cloud Apps policies
• Develop and tune security detections using KQL and Microsoft Sentinel
• Create Advanced Hunting queries and implement Sentinel Content Hub solutions
• Manage phishing simulation campaigns and support vulnerability assessments
• Interpret vulnerability scanning results and provide appropriate recommendations
• Audit and improve Microsoft 365 security environments
• Support Secure Score improvements, device tagging and security lifecycle activities
• Assist with Incident Response investigations and security escalations
• Produce clear technical reports, recommendations and configuration documentation
• Review client-facing reports for technical accuracy
• Use scripting and automation to improve security operations where appropriate
• Contribute to automation using tools such as Logic Apps, Azure Functions and playbooks