Azure DevSecOps Engineer in London

We're looking for an Azure Dev Sec Ops Engineer who enjoys solving problems rather than simply identifying them.

You'll work alongside Platform Engineers, Dev Ops Engineers, Infrastructure teams and Security stakeholders to translate security findings into practical engineering work.

Whether it's improving Defender recommendations, hardening Azure services, strengthening identity controls or implementing compliance capabilities through Purview, your focus will be on reducing real-world risk through hands‑on delivery.

Strong technical capability is essential, but so is the ability to communicate clearly with both technical and non-technical stakeholders.

We value engineers who can explain why something matters, build consensus, and work collaboratively to drive remediation through to completion.

This isn't a role for someone who produces reports and walks away.

We want someone who enjoys fixing the underlying problem and leaving the environment in a better state than they found it.

Key Responsibilities

• Azure Security Engineering & Cloud Remediation
• Deliver hands‑on remediation of Azure security findings, taking issues from investigation through to resolution.
• Improve the security posture of Azure environments by addressing misconfigurations, identity risks and infrastructure weaknesses.
• Secure Azure services including networking, storage, compute, platform services and Kubernetes workloads.
• Implement preventative guardrails using Azure Policy, Infrastructure‑as‑Code and automation to reduce repeat findings.
• Partner with Platform and Dev Ops teams to embed security into delivery pipelines rather than bolting it on afterwards.
• Translate technical security findings into clear engineering tasks and see them through to completion.
• Microsoft Defender Security
• Improve and maintain Microsoft Defender for Cloud, Defender for Endpoint and Defender EASM.
• Reduce vulnerabilities through configuration hardening, endpoint protection and continuous remediation.
• Drive measurable improvements in Secure Score through practical engineering rather than tactical fixes.
• Work alongside Security Operations to investigate, prioritise and resolve security findings.
• Data Protection & Compliance
• Implement and enhance Microsoft Purview capabilities including DLP, Sensitivity Labels, Insider Risk and Information Protection.
• Support compliance initiatives across standards such as ISO 27001, SOC 2, GDPR and NIS2.
• Produce and maintain security documentation, implementation guidance and audit evidence where required.
• Platform Hardening
• Deliver improvements across Azure identity, networking, endpoints and workloads.
• Implement and enhance Conditional Access, Privileged Identity Management (PIM), Key Vault and encryption controls.
• Work with engineering teams to reduce technical debt and improve security by default.
• Detection & Continuous Improvement
• Support Microsoft Sentinel through analytics tuning, automation and alert optimisation.
• Assist with incident investigation and remediation where required.
• Produce meaningful reporting that demonstrates measurable improvements in security posture over time.
• Collaboration & Consultancy
• Build strong working relationships with Engineering, Infrastructure, Security and Product teams.
• Explain technical risk in a way that enables informed decisions rather than creating unnecessary barriers.
• Provide pragmatic guidance that balances security, operational requirements and delivery timelines.
• Contribute to a collaborative engineering culture where security is viewed as an enabler, not an obstacle.
• Continuously improve remediation processes, documentation and automation to make future delivery faster and more consistent.

Skills & Experience

Essential

• Strong hands‑on Azure security engineering experience.
• Experience with Microsoft Defender for Cloud, Defender for Endpoint and Defender EASM.
• Experience implementing Microsoft Purview capabilities including DLP and Information Protection.
• Strong understanding of Azure networking, identity and cloud architecture.
• Experience remediating vulnerabilities rather than simply identifying them.
• Azure identity expertise including Entra ID, Conditional Access and Privileged Identity Management.
• Power Shell and/or Microsoft Graph automation.
• Excellent communication and stakeholder management skills, with the ability to work effectively across engineering, infrastructure and security teams.
• A consultative approach with the confidence to challenge constructively and influence technical decisions.

Desirable

• Microsoft Sentinel administration and detection engineering.
• Experience implementing Zero Trust principles.
• Experience working within regulated or compliance‑driven environments.
• Knowledge of Infrastructure‑as‑Code (Terraform, Bicep or ARM).
• Azure Policy and automated governance experience.
• #J-18808-Ljbffr