Job Description

Security Engineer

Cardiff | Hybrid Working | Up to £45,000

CPS Group are working with a leading Microsoft-focused security partner who are looking to add a Security Engineer to their growing Cyber Security Delivery Team.

This is a great opportunity for someone with experience in cyber security, SOC, IT support or technical delivery who enjoys working with clients and wants to build their expertise across the Microsoft security stack.

As a Security Engineer, you’ll act as a technical point of contact for clients, helping them get the most from their Microsoft security solutions. You’ll work closely with the wider Delivery and Engineering teams, providing practical advice, investigating issues and making security improvements across client environments.

You’ll work with technologies including Microsoft Defender XDR, Microsoft Entra, Defender for Cloud Apps, Exchange Online and Microsoft Sentinel.

What you’ll be doing

• Building strong relationships with clients and acting as a trusted technical point of contact
• Supporting client calls and explaining technical issues and recommendations clearly
• Assessing incoming technical requests to ensure they are appropriate, in scope and aligned with best practice
• Configuring and tuning Microsoft security controls, including Defender policies, Entra settings and Exchange Online security
• Building and maintaining detection capabilities using KQL, Advanced Hunting and Microsoft Sentinel
• Managing phishing simulation campaigns and supporting vulnerability scanning
• Reviewing client environments and identifying opportunities to improve their Microsoft 365 security posture
• Supporting incident response activities and security investigations
• Producing clear technical reports, recommendations and documentation
• Working with senior engineers to triage and escalate more complex technical issues
• Where applicable, using scripting and automation such as Python, Bicep, ARM, JSON or YAML to improve processes and efficiency

What we’re looking for

We’re looking for someone with a genuine interest in cyber security, strong communication skills and the technical ability to work confidently with clients.

You’ll ideally have:

• Experience in a security or technical environment, such as SOC, Security Engineering, IT Support or Technical Delivery
• Working knowledge of Microsoft security technologies, particularly Defender XDR, Entra, Defender for Cloud Apps and Exchange Online
• Strong knowledge of KQL and Advanced Hunting
• Experience with Microsoft Sentinel, including analytics rules and Content Hub solutions
• Good understanding of security protocols, standards and best practices
• Knowledge of vulnerability management and risk analysis
• Strong technical judgement and the ability to recognise when an issue needs to be escalated
• Excellent communication skills, with the ability to explain technical information to both technical and non-technical audiences
• Strong written skills and experience producing technical documentation or reports
• A proactive and curious approach, with a genuine desire to continue developing your technical skills

A degree in Computer Science, Cyber Security or a related subject would be beneficial, although equivalent professional experience will also be considered.

It would be great if you also have experience with:

• Python, Bicep, ARM, JSON or YAML
• Azure Logic Apps, Azure Functions or codeless playbooks
• Jinja2
• Microsoft certifications such as SC-200, SC-300, SC-401, MS-102 or AZ-500

Contact: Zach Bennett - CPS Group