EXPERIENCE

• At least five years’ experience in designing, implementing, and managing technical security controls within cloud environments (e.g., Azure) and end-user devices.
• Hands-on expertise with security tools and technologies, such as Defender for Cloud, Defender for Endpoint, and SIEM solutions.
• Solid background in implementing and managing security policies via Microsoft Intune and Group Policy (GPO) to secure endpoints and applications.
• Proven ability to monitor and respond to security incidents, including incident analysis and resolution.
• Demonstrated proficiency in identifying and remediating vulnerabilities, with knowledge of vulnerability management tools and frameworks.
• Experience collaborating with governance and compliance teams to align technical controls with security standards (e.g., ISO 27001).
• Excellent troubleshooting, communication, and documentation skills, with the ability to collaborate effectively across teams.TECHNICAL SKILLS
• Strong understanding of Microsoft-based security solutions (including Azure, Intune, and the Defender suite) is crucial.
• In-depth understanding of common security threats, attack vectors, and mitigation techniques in a Microsoft-based environment.
• Relevant certifications such as SSCP, Security Blue Team, Microsoft Certified: Azure Security Engineer Associate AZ-500, Microsoft Certified: Security Operations Analyst Associate SC-200, and Microsoft Certified: Cybersecurity Architect Expert SC-100 are highly desirable.
• Strong understanding of Windows-based environments, including integration between cloud services (e.g., Entra) with Active Directory, is highly desirable.
• Experience and awareness of Azure automation services (i.e., Azure Logic Apps, Azure Automation Accounts) and PowerShell is desirable.

Key Accountabilities

• Configure, maintain, and enhance security controls within Microsoft Defender for Endpoint, Defender for Cloud Apps, Defender for Identity, Defender for Office 365, Exchange Online, Microsoft Sentinel, and Entra ID, ensuring comprehensive protection across Emeria UK’s IT landscape.
• Implement and manage security policies and controls using Microsoft Intune and Group Policy (GPO) to secure endpoints, user accounts, and cloud applications.
• Monitor security alerts and incidents through Microsoft Sentinel, conducting thorough investigations and leading response efforts to mitigate risks.
• Perform proactive threat hunting using data from Defender, Sentinel, and Entra logs to detect potential security incidents.
• Optimise and maintain threat detection rules, automation playbooks, and alert tuning within Sentinel and Defender solutions to reduce false positives and enhance response efficiency.
• Manage access control policies and identity protection configurations to secure user authentication and reduce the risk of account compromise.
• Regularly assess the security posture of Microsoft 365 and Azure environments, identifying areas for improvement and implementing recommended changes.
• Develop and maintain comprehensive documentation for security policies, configurations, and incident response procedures.
• Collaborate with the IT Security Manager and other stakeholders to align security practices with the organisation’s risk management strategy.
• Stay updated on the latest Microsoft security technologies, threats, and best practices, and proactively suggest improvements to the current security framework

THE ROLE

We are looking for a dedicated and detail-oriented Microsoft Cloud Security Engineer to manage and enhance security controls across our Microsoft security ecosystem. You are passionate about leveraging Microsoft security technologies to protect critical assets and data, with a focus on proactive monitoring, threat detection, and incident response. Your hands-on expertise with Microsoft Defender solutions and Azure-based security tools will be crucial in maintaining a secure and resilient IT environment.
In this role, you will be responsible for configuring, optimising, and monitoring security solutions including Defender for Endpoint, Defender for Cloud Apps, Defender for Identity, Defender for Office 365, Exchange Online, Microsoft Sentinel, Intune, and Entra ID. You will work closely with the IT Security Manager to ensure that our security measures are effective, scalable, and aligned with evolving threats. If you have a deep understanding of the Microsoft security stack and a commitment to safeguarding cloud environments, we would love to hear from you.

Key Accountabilities

• Configure, maintain, and enhance security controls within Microsoft Defender for Endpoint, Defender for Cloud Apps, Defender for Identity, Defender for Office 365, Exchange Online, Microsoft Sentinel, and Entra ID, ensuring comprehensive protection across Emeria UK’s IT landscape.
• Implement and manage security policies and controls using Microsoft Intune and Group Policy (GPO) to secure endpoints, user accounts, and cloud applications.
• Monitor security alerts and incidents through Microsoft Sentinel, conducting thorough investigations and leading response efforts to mitigate risks.
• Perform proactive threat hunting using data from Defender, Sentinel, and Entra logs to detect potential security incidents.
• Optimise and maintain threat detection rules, automation playbooks, and alert tuning within Sentinel and Defender solutions to reduce false positives and enhance response efficiency.
• Manage access control policies and identity protection configurations to secure user authentication and reduce the risk of account compromise.
• Regularly assess the security posture of Microsoft 365 and Azure environments, identifying areas for improvement and implementing recommended changes.
• Develop and maintain comprehensive documentation for security policies, configurations, and incident response procedures.
• Collaborate with the IT Security Manager and other stakeholders to align security practices with the organisation’s risk management strategy.
• Stay updated on the latest Microsoft security technologies, threats, and best practices, and proactively suggest improvements to the current security framework.