Security Engineer

We’re working with a fast-growing Managed Security Service Provider (MSSP) in London that is looking to add an experienced Security Engineer to its expanding team.This is a great opportunity for someone who has come from a Systems Administration or Infrastructure Engineering background and has since moved into cyber security.You’ll work across a variety of client environments, getting hands-on with leading security technologies and helping customers strengthen, manage and protect their infrastructure.The RoleAs a Security Engineer, you’ll work across both security and infrastructure, supporting multiple customer environments and helping to implement, manage and improve their security tooling.Your responsibilities will include:Working hands-on with Microsoft Defender, CrowdStrike Falcon and Microsoft SentinelManaging and improving endpoint security across customer environmentsConfiguring and optimising EDR/XDR and SIEM solutionsInvestigating security incidents, alerts and suspicious activitySupporting vulnerability management, remediation and security hardeningTroubleshooting security issues across Windows and Microsoft environmentsWorking closely with customers to understand and resolve security challengesHelping improve security processes, tooling and automationSupporting the continued development of the MSSP's security servicesWhat We're Looking ForWe're particularly interested in candidates who started their careers within Systems Administration, Systems Engineering or Infrastructure before moving into security.You'll ideally have:Commercial experience as a Security Engineer, Cyber Security Engineer, Infrastructure Security Engineer or similarA strong previous background in Systems Administration or Infrastructure EngineeringHands-on experience with Microsoft Defender, ideally Defender for Endpoint and/or Defender XDRExperience with CrowdStrike FalconExperience with Microsoft SentinelStrong knowledge of Windows environments and endpoint securityGood understanding of SIEM, EDR/XDR, vulnerability management and incident responseExperience across Azure, Entra ID and Microsoft 365Desirable ExperienceExperience with any of the following would be beneficial:Microsoft IntunePowerShellKQLConditional AccessDefender for CloudSecurity hardeningVulnerability remediationAutomation and scripting