Cyber Security Engineer

First Central

. Engineer, configure and maintain cyber security controls across the Microsoft security estate .

Posted 10/14/2026full-timeManchester • United KingdomMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in cyber security engineering, particularly with Microsoft security technologies and cloud security controls. Proficient in implementing security automation, telemetry, and incident response workflows while ensuring compliance with security standards and frameworks.

Highest-signal resume keywords

Microsoft Security TechnologiesCyber Security EngineeringSecurity Automation and OrchestrationCloud Security ControlsTechnical Security Qualifications

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Security TelemetryIncident ResponseVulnerability ManagementScripting and AutomationTechnical TroubleshootingControl ValidationDevOps PracticesAgile MethodologiesSecurity FrameworksThreat Intelligence

Soft Skills

Excellent CommunicationStakeholder ManagementOrganizational Skills

Tools & Technologies

Defender XDRPurviewSentinelDefender for CloudEntra Security

Certifications & Qualifications

AZ-500SC-200SC-300SC-100CISSP

Industry Keywords

Cyber Security ControlsIncident InvestigationsCompliance StandardsISO27001NISTPCI-DSS

Tech Stack

Tools & technologies

AzureCloudCyber Security

About the role

Key responsibilities & impact

Engineer, configure and maintain cyber security controls across the Microsoft security estate
Develop and maintain security telemetry, data connectors, alerting integrations, workbooks and technical monitoring coverage
Build, test and maintain security automation, orchestration and response workflows, including SOAR playbooks and automated containment actions
Implement and maintain technical security policies, baselines and guardrails
Translate threat intelligence, incident learning and detection requirements into technical controls and monitoring capabilities
Support continuous improvement of security controls for end users, Azure workloads, cloud services, identities and agent identities
Integrate security controls into DevOps and value-stream delivery practices
Implement runtime controls, monitoring, containment and security guardrails for AI agents and autonomous workflows
Contribute to AI defence capabilities
Monitor cyber security tooling health, coverage, effectiveness and lifecycle, identifying gaps and automation opportunities
Provide technical support for cyber incident investigations, threat hunting, control validation and recovery activities
Support remediation of security weaknesses and confirm corrective controls are effective
Undertake cyber control reviews of third-party platforms and integrations
Maintain technical documentation, configuration standards, operating procedures and security evidence
Assess proposed changes to security tooling and controls
Contribute to cyber metrics and reporting
Ensure compliance with company policies, security standards and regulatory requirements
Work collaboratively with Cyber, Technology, Architecture and value-stream teams

Requirements

What you’ll need

Practical experience in cyber security engineering, security platform engineering or a closely related technical security role
Hands-on experience with Microsoft security technologies, including Defender XDR, Purview, Sentinel, Defender for Cloud and Entra security capabilities
Relevant technical security qualification or equivalent practical experience, such as AZ-500, SC-200, SC-300, SC-100, CISSP or similar
Strong technical troubleshooting and analytical skills
Experience implementing and maintaining security telemetry, integrations, automation and response workflows
Knowledge of cloud security controls and Azure security concepts
Understanding of identity security, workload identities, privileged access, Conditional Access and non-human or agent identity risks
Experience supporting detection engineering, incident response, vulnerability or exposure management and control validation
Understanding of DevOps, CI/CD and secure delivery practices in an Agile, value-stream environment
Understanding of security frameworks such as ISO27001, NIST and PCI-DSS
Ability to automate security activities using scripting, APIs, workflow tools or infrastructure-as-code approaches
Excellent communication and stakeholder management skills
Good organisational skills and ability to manage engineering priorities across multiple stakeholders
Willingness to continually develop knowledge of Microsoft security, cloud, automation and agentic security capabilities

Benefits

Comp & perks

Flexible hybrid working
Predominantly home-based working
Choice of office location in Salford Quays (Manchester), Haywards Heath (West Sussex), or Guernsey
Opportunity to work in the office more frequently if desired
Learning and development opportunities
Opportunity to make a real impact for customers, colleagues and the business