Microsoft Defender Engineer

IT Engineer - Microsoft Defender Security Operations

3 months

London - onsite

Inside IR35 - Umbrella only

Role Overview

We are seeking an accomplished IT Engineer with specialist expertise in the Microsoft Defender security ecosystem. The successful candidate will strengthen cyber defence across endpoints, identities, cloud services, and hybrid infrastructure.

Key Responsibilities

Security operations and threat defence

Manage and optimise Microsoft Defender across Endpoint, Identity, Cloud Apps, Office 365, and Cloud Security Posture Management.
Monitor alerts and conduct threat investigations.
Support incident response with containment and remediation.
Conduct proactive threat hunting.Platform administration and governance

Configure policy baselines and protection profiles.
Maintain governance and compliance alignment.
Lead version management and capability tuning.
Maintain documentation for configurations and processes.Stakeholder engagement and improvement

Collaborate with Infrastructure, Cloud, and Cyber Security teams.
Provide security insights to projects.
Produce reporting for stakeholders.
Identify automation and workflow enhancements.Essential Skills

Strong experience with Microsoft Defender platforms.
Incident investigation skills across endpoint, identity, and cloud.
Understanding of Microsoft 365, Azure, and Zero Trust.
Skilled in ASR rules, AV baselines, and KQL analytics.Desirable Skills

Experience with Microsoft Sentinel.
Understanding of MITRE ATT and CK.
Exposure to red team activities.
Familiarity with automation using PowerShell.Professional Attributes

Analytical thinker.
Resilient and proactive.
Strong communicator.
Collaborative mindset.Qualifications

Microsoft security certifications such as SC 200, SC 300, or SC 400.
Broader cloud or cyber qualifications beneficial