Airswift
Senior IT Security Engineer
Get notified of more jobs like this · No spam, ever
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
About Us
Airswift is the leading workforce solutions provider to the STEM industries. For over 40 years Airswift has been transforming lives through the provision of international workforce solutions to STEM industries. Today, we are an integrated team of over 900 employees across 37 countries, supporting over 8,000 contractors globally.
We are a people business – we transform lives through the world of work. We care about wellbeing, community engagement and our planet – we plant a tree for every person placed in a job globally! We have a passion for growth, including investing in the development of our people.
We support professionals looking for jobs with exceptional firms in the technology, construction, and engineering sectors.
Role Description
We are looking for a hands-on Senior IT Security Engineer who thrives on getting stuck in and working alongside the team to deliver what the business actually needs. This is a delivery-focused security engineering role across the full Microsoft stack – building and running controls in Microsoft Defender, Sentinel and Purview, automating operations wherever possible, and cutting through the noise to keep our protection sharp and relevant.
You will take ownership of data sovereignty and protection, immutable backups and recovery, Right to be Forgotten requests, and streamlined incident response with the Service Desk. As our AI and Copilot platform scales, you will be the engineering owner of the security and data-protection controls that keep agents, connectors and tenant data safe. This is a role for someone who prefers building over managing and wants to make a real impact across the estate.
Principle Accountabilities:
Microsoft security stack ownership
- Configure, tune and operate Microsoft Defender XDR across endpoints, identity, email, SaaS and cloud, and administer Microsoft Purview for information protection, DLP, records management and eDiscovery.
- Build and maintain Microsoft Sentinel analytics, hunting queries and automated response playbooks (Logic Apps and PowerShell) so that detection and response scale without manual effort.
Threat detection and incident response
- Lead triage, containment, eradication and recovery for security incidents, integrated with the Service Desk, and hunt for threats using KQL with custom detections and dashboards that track control effectiveness.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Data protection, retention and AI platform safety
- Design and maintain M365 retention, sensitivity and DLP controls – extended to the Copilot and agent layer – to keep tenant data, connectors and grounding sources protected.
- Own the Right to be Forgotten process under UK GDPR (discovery, validation, deletion, reporting and audit evidence), partnering with Legal and Data Protection on defensible retention and data-subject requests.
Backups, immutability and recovery
- Operate immutable backup policies, vault locks and archive tiers for M365 and Azure workloads, and run restore tests and recovery drills with documented RPO/RTO.
Posture, risk and awareness
- Improve Secure Score and Defender posture through prioritised remediation, and provide concise monthly risk and control-health updates to technology leadership.
- Track the CVEs, threat intelligence and trends that genuinely matter to the business, and feed real-world gaps into training, knowledge articles and how-to guides.
Ways of working
- Work closely with IT Operations, the Cloud and AI engineering team and the Service Desk to land changes safely, treating configuration as code and keeping it version-controlled.
Skills, Knowledge, and Experience:
Essential
- Strong hands-on, production experience with Microsoft Sentinel, Defender XDR and Microsoft Purview.
- Proficiency in Kusto Query Language (KQL) for detections, threat hunting and dashboards.
- Solid Microsoft Entra ID experience, including conditional access and identity protection.
- Practical Purview experience: DLP, sensitivity labels, records management and eDiscovery.
- Proven work with immutable backups and archive storage for M365 and Azure, with documented recovery testing.
- Incident-response capability: triage, containment, forensics basics, evidence handling and clear write-ups.
- Scripting with PowerShell; experience with Logic Apps and the Microsoft Graph API is an advantage.
- A working understanding of UK GDPR principles and their application to retention and Right to be Forgotten.
- A clear communicator who writes concise runbooks and can brief stakeholders.
Desirable
- Infrastructure as Code for security content and configuration (for example Bicep or Terraform).
- Experience handling Subject Rights Requests, and familiarity with CIS Benchmarks, ISO 27001 controls and NCSC guidance.
- Exposure to EDR, email security and CASB controls within Defender, and to phishing simulation and awareness tooling.
- Awareness of the security and governance considerations of AI agents and Copilot (data exposure, prompt/grounding risks).
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Certifications (advantageous, not required)
- Microsoft SC-200, SC-100, SC-400 or AZ-500; a privacy certification such as CIPT.
What we can offer you!
- Attractive monthly base salary + competitive commission/performance bonus.
- Genuine career progression opportunities, either locally or globally!
- World-class training programmes and development opportunities.
- Team driven environment, supportive culture with a focus on work-life balance.
- Career breaks available after one year.
- Real time recognition through our employee reward platform.
- Mental Health First Aiders to signpost you to support when you need it.
- Yearly destination trips as part of our High Flyers program (Dubai, Buenos Aires, etc…)
- Charity days for various important causes such as Relay for Life and Earth Day.
Our Core Values:
- Growth - In life and business, one must grow to flourish and achieve high ambitions. Growth requires change, challenge, risk and sacrifice - we will always choose growth.
- Life – Above all else, we value life. The quality of life, both in and outside of work, profoundly influences our well-being and our impact on the world.
- Excellence - We deliver, holding ourselves accountable for results. Our customers see excellence in everything we do.
- Integrity - We are ethical, open, honest and authentic. People trust us to do the right thing for the right reason.
Disclaimer
The above statements are intended to describe the general nature and level of work being performed by people assigned to this classification. They are not to be construed as an exhaustive list of all responsibilities, duties, and skills required of personnel so classified. All personnel may be required to perform duties outside of their normal responsibilities from time to time, as needed.
Diversity & Inclusion
At Airswift, we believe that diversity is critical to our success and makes us a great place to work. We are committed to building an equal opportunity workplace, the more inclusive we are - the better our work will be.
Please click here to view our privacy policy.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London