ST Global Tech LLC
Security Engineer - Energy and Utility domain
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Security Engineer
Location: Remote and as per business needs
Eligibility: 5 years unbroken residency / Minimum 5 years of continuous UK residency
Buy Rate: GBP 280 daily (Inside IR35)
Candidate must have Energy and Utility domain experience. “UK CITIZENS” CV only
Role Purpose
The Cyber Security Engineer will play a key delivery role in establishing, operating, and continually improving the cyber security posture of a greenfield Microsoft tenant supporting National Grid Strategic Infrastructure (SI). The role is responsible for implementing and maintaining security controls in line with National Grid IT Security standards, working closely with Security Architecture and the NG Cyber Security Incident Response Team (CSIRT). This includes hands-on configuration, remediation activities, direct support of penetration testing / security assessment activities, and security improvements across Microsoft Intune, Entra ID, M365, Azure, and Microsoft Purview.
This is a practitioner role, suited to someone comfortable working in an emerging environment where controls, operating models, and assurance processes are being actively matured.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Technical & Security Experience
- Hands-on experience working with Microsoft cloud security capabilities, ideally in a greenfield or early-stage tenant.
- Practical experience with:
- Microsoft Intune device and policy hardening
- Microsoft Entra ID (formerly Azure AD)
- Microsoft 365 security and access controls
- Azure security and access controls
- Microsoft Purview compliance and data protection capabilities
- Experience with assessing and implementing CIS (Center for Internet Security) controls
- Experience supporting and remediating findings from penetration testing or security assessments.
- Strong understanding of Identity and Access Management, least privilege, and role-based access control.
Ways of Working
- Comfortable working in evolving environments where controls, processes, and tooling are being established
- Able to translate security findings into clear, prioritized remediation actions
- Experience working collaboratively across architecture, engineering, business, and security teams to improve security posture
- Strong attention to detail and an evidence-based approach to security and assurance
- Experience within a SAFE Agile delivery methodology, capable of owning, managing, refining, and prioritizing the backlog relative to their skillset with the delivery team.
- Experience in SAFE planning approaches, where work is planned in 12 weeks incremental periods within a controlled and focused method
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Desirable (but not essential)
- Experience working within regulated or critical national infrastructure (CNI) environments
- Familiarity with National Grid IT, security standards, or enterprise control frameworks
- Exposure to security incident management or coordination with CSIRT functions
- Relevant security or Microsoft certifications (e.g. CCSP, SC-200, SC-300, SC-400, AZ-500)
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Location