Microsoft Cloud Security Engineer

Location: Remote

Contract type: 6 months Fixed Term Contract

Hours: 35 hours per week Monday to Friday

The Role

We are looking for a dedicated and detail-oriented Microsoft Cloud Security Engineer to manage and enhance security controls across our Microsoft security ecosystem. You are passionate about leveraging Microsoft security technologies to protect critical assets and data, with a focus on proactive monitoring, threat detection, and incident response. Your hands-on expertise with Microsoft Defender solutions and Azure-based security tools will be crucial in maintaining a secure and resilient IT environment. In this role, you will be responsible for configuring, optimising, and monitoring security solutions including Defender for Endpoint, Defender for Cloud Apps, Defender for Identity, Defender for Office 365, Exchange Online, Microsoft Sentinel, Intune, and Entra ID. You will work closely with the IT Security Manager to ensure that our security measures are effective, scalable, and aligned with evolving threats. If you have a deep understanding of the Microsoft security stack and a commitment to safeguarding cloud environments, we would love to hear from you.

Key Accountabilities

• Configure, maintain, and enhance security controls within Microsoft Defender for Endpoint, Defender for Cloud Apps, Defender for Identity, Defender for Office 365, Exchange Online, Microsoft Sentinel, and Entra ID, ensuring comprehensive protection across Emeria UK’s IT landscape.
• Implement and manage security policies and controls using Microsoft Intune and Group Policy (GPO) to secure endpoints, user accounts, and cloud applications.
• Monitor security alerts and incidents through Microsoft Sentinel, conducting thorough investigations and leading response efforts to mitigate risks.
• Perform proactive threat hunting using data from Defender, Sentinel, and Entra logs to detect potential security incidents.
• Optimise and maintain threat detection rules, automation playbooks, and alert tuning within Sentinel and Defender solutions to reduce false positives and enhance response efficiency.
• Manage access control policies and identity protection configurations to secure user authentication and reduce the risk of account compromise.
• Regularly assess the security posture of Microsoft 365 and Azure environments, identifying areas for improvement and implementing recommended changes.
• Develop and maintain comprehensive documentation for security policies, configurations, and incident response procedures.
• Collaborate with the IT Security Manager and other stakeholders to align security practices with the organisation's risk management strategy.
• Stay updated on the latest Microsoft security technologies, threats, and best practices, and proactively suggest improvements to the current security framework.

Person Specification

Experience

• At least five years’ experience in designing, implementing, and managing technical security controls within cloud environments (e.g., Azure) and end-user devices.
• Hands-on expertise with security tools and technologies, such as Defender for Cloud, Defender for Endpoint, and SIEM solutions.
• Solid background in implementing and managing security policies via Microsoft Intune and Group Policy (GPO) to secure endpoints and applications.
• Proven ability to monitor and respond to security incidents, including incident analysis and resolution.
• Demonstrated proficiency in identifying and remediating vulnerabilities, with knowledge of vulnerability management tools and frameworks.
• Experience collaborating with governance and compliance teams to align technical controls with security standards (e.g., ISO 27001).
• Excellent troubleshooting, communication, and documentation skills, with the ability to collaborate effectively across teams.

Technical Skills

• Strong understanding of Microsoft-based security solutions (including Azure, Intune, and the Defender suite) is crucial.
• In-depth understanding of common security threats, attack vectors, and mitigation techniques in a Microsoft-based environment.
• Relevant certifications such as SSCP, Security Blue Team, Microsoft Certified: Azure Security Engineer Associate AZ-500, Microsoft Certified: Security Operations Analyst Associate SC-200, and Microsoft Certified: Cybersecurity Architect Expert SC-100 are highly desirable.
• Strong understanding of Windows-based environments, including integration between cloud services (e.g., Entra) with Active Directory, is highly desirable.
• Experience and awareness of Azure automation services (i.e., Azure Logic Apps, Azure Automation Accounts) and PowerShell is desirable.

The Benefits

Our customers deserve the best and the same applies to our people. We’ll support you with all of the technology, training and support that you need to do your job well. We offer competitive salaries and a range of benefit packages. In addition to the core benefits, we also offer a range of exclusive discounts on extra benefits to help you and your family make the most of your money, safeguard your future and look after your health.

Diversity

We’re committed to promoting diversity at Emeria and recruit on merit. We will consider applications from job share applicants.

Ready to Apply?

Click the below apply button to start your application for this role. We will ask you to upload your CV and answer a few questions. If you meet the criteria for the role we’ll be in touch to arrange a short telephone interview and our shortlist of candidates will be invited to attend interviews with the hiring manager and up to three other key stakeholders.