Cyber Security Lead in London

Location: London (Hybrid)

Salary: £100,000 + Bonus + Excellent Benefits

My client is a highly successful international organisation, looking for a Cyber Security Lead to join them.

We are seeking a highly skilled Cyber Security Lead to take ownership of our client's enterprise security posture across Microsoft cloud, identity and endpoint environments. This is a hands-on technical leadership role for a Cyber Security professional who can combine deep engineering expertise with the ability to build and drive a security function forward.

This is a genuinely greenfield environment, making experience of building and developing a Cyber Security function from the ground up essential. You will become the technical security authority within the organisation, establishing the security roadmap, implementing the appropriate controls and helping shape the organisation's approach to Cyber Security as it enters its next phase of growth.

You will be expected to have proven experience managing major cyber security incidents end-to-end, from initial investigation and containment through to remediation, lessons learned and improvements to prevent recurrence. There will be a junior colleague to support and develop, but the core technical expertise and direction will come from you.

As Cyber Security Lead, you will lead the delivery of the Cyber Security roadmap, strengthen detection and response capabilities, and provide hands-on technical expertise across Microsoft security technologies. Working closely with Infrastructure, Cloud and Architecture teams, you will ensure security controls are properly designed, implemented and continuously improved.

This role is particularly well suited to Cyber Security Leads, Heads of Cyber Security, Technical Security Managers, Security Operations Leads, Cyber Security Managers and hands-on Heads of Cyber who enjoy leading from the front, remaining technically close to the technology and having genuine ownership of the security function.

Key Responsibilities:

• Lead the design, implementation, and optimisation of security controls across Microsoft Defender, Intune, Entra ID, Azure, and M365.
• Own and evolve Conditional Access, identity protection, device compliance, and endpoint hardening strategies.
• Act as the technical lead for cyber incidents, supporting investigation, containment, and recovery activities.
• Oversee vulnerability management, ensuring prioritisation and remediation aligned to business risk.
• Manage and enhance security baselines, configuration standards, and policy enforcement across the estate.
• Lead continuous improvement initiatives across detection, response, automation, and cloud security posture.
• Support governance activities including risk assessments, audits, and compliance reviews.

Technical Experience:

• Strong hands-on experience with Microsoft Defender XDR, Intune, Entra ID, Azure security controls, and Microsoft Sentinel.
• Proven ability to design and implement Conditional Access, identity protection, and device compliance policies.
• Experience developing detection rules, analytics, and automation using KQL and Sentinel playbooks.
• Solid understanding of Zero Trust architecture and practical implementation across enterprise environments.
• Strong knowledge of endpoint hardening, EDR tuning, and modern attack techniques.
• Relevant certifications (e.g., SC-200, SC-300, AZ-500, MS-102, CISSP) are highly desirable.

Please note: this role does not offer visa sponsorship.

Key Words: Cyber Security Lead, Senior Security Engineer, Security Operations Lead, Technical Security Manager, Security Engineering Lead, Microsoft Security, Defender, Intune, Entra, Azure, Sentinel, Endpoint Security, Cloud Security, Identity Security, Zero Trust, Vulnerability Management, Incident Response, Operational Excellence, Security Strategy.