We’re working with a fast-growing Managed Security Service Provider (MSSP) in London that is looking to add an experienced Security Engineer to its expanding team.
This is a great opportunity for someone who has come from a Systems Administration or Infrastructure Engineering background and has since moved into cyber security.
You’ll work across a variety of client environments, getting hands-on with leading security technologies and helping customers strengthen, manage and protect their infrastructure.
The Role
As a Security Engineer, you’ll work across both security and infrastructure, supporting multiple customer environments and helping to implement, manage and improve their security tooling.
Your responsibilities will include:
- Working hands-on with Microsoft Defender, CrowdStrike Falcon and Microsoft Sentinel
- Managing and improving endpoint security across customer environments
- Configuring and optimising EDR/XDR and SIEM solutions
- Investigating security incidents, alerts and suspicious activity
- Supporting vulnerability management, remediation and security hardening
- Troubleshooting security issues across Windows and Microsoft environments
- Working closely with customers to understand and resolve security challenges
- Helping improve security processes, tooling and automation
- Supporting the continued development of the MSSP's security services
What We're Looking For
We're particularly interested in candidates who started their careers within Systems Administration, Systems Engineering or Infrastructure before moving into security.
You'll ideally have:
- Commercial experience as a Security Engineer, Cyber Security Engineer, Infrastructure Security Engineer or similar
- A strong previous background in Systems Administration or Infrastructure Engineering
- Hands-on experience with Microsoft Defender, ideally Defender for Endpoint and/or Defender XDR
- Experience with CrowdStrike Falcon
- Experience with Microsoft Sentinel
- Strong knowledge of Windows environments and endpoint security
- Good understanding of SIEM, EDR/XDR, vulnerability management and incident response
- Experience across Azure, Entra ID and Microsoft 365
Desirable Experience
Experience with any of the following would be beneficial:
- Microsoft Intune
- PowerShell
- KQL
- Conditional Access
- Defender for Cloud
- Security hardening
- Vulnerability remediation
- Automation and scripting