Overview
Security Engineer Jobs in London Area, United Kingdom at Sanderson
Title: Security Engineer
Company: Sanderson
Location: London Area, United Kingdom
🔐 Security Engineer – Azure & Identity Security
📍 London | Hybrid Working
💷 Salary: £80,000
We’re looking for an experienced Security Engineer to join a growing technology and security function within a fast-paced, customer-focused organisation
.This is a hands-on technical role with real architectural influence. You’ll help design, implement, and operate security controls across a complex hybrid environment spanning Microsoft Azure, corporate offices, datacentres, SaaS platforms, and a large UK retail footprint
.
Working closely with Cloud, Infrastructure, Network Engineering, IAM, and Application teams, you’ll play a key role in strengthening security across cloud platforms, identity, endpoints, servers, data protection, threat detection, vulnerability management, and complianc
e.
The R
ole
As Security Engineer, you will take ownership of key security controls across cloud and on-premises environments. You’ll define security standards, improve detection capabilities, strengthen identity and access controls, harden platforms, support incident response, and help ensure security is embedded into technology projects from the out
set.You’ll work particularly closely with Network Engineering and Infrastructure teams, defining security requirements, reviewing configurations, and ensuring Zero Trust, least privilege, and compliance principles are consistently appl
ied.
Key Responsibil
ities
• Design and implement security controls across Microsoft Azure, on-premises infrastructure, endpoints, and SaaS applica
tions.• Define and maintain security baselines and hardening standards aligned with CIS, NIST, and Microsoft security bench
marks.• Govern and enhance Azure security controls using Azure Policy, Microsoft Defender for Cloud, and cloud-native security to
oling.• Strengthen identity security across Microsoft Entra ID and Active Directory, including Conditional Access, MFA, SSO, passwordless authentication, PIM, RBAC, and identity gover
nance.• Monitor and investigate identity threats, risky sign-ins, compromised accounts, endpoint attacks, Azure security events, and server-related inci
dents.• Own and operate security monitoring and detection tooling, including Microsoft Sentinel, Defender XDR, Defender for Endpoint, and Identity Prote
ction.• Develop and improve SIEM detection rules, correlation logic, behavioural analytics, threat-hunting use cases, and security autom
ation.• Support incident response, forensic investigation, root cause analysis, and post-incident security improve
ments.• Implement security hardening across Windows Server, domain controllers, Azure virtual machines, and virtualisation plat
forms.• Partner with Infrastructure teams on vulnerability management, patch governance, remediation, and secure configuration manag
ement.• Support data protection controls including Azure Key Vault, PKI and certificate lifecycle management, Microsoft Purview, sensitivity labels, retention policies, encryption, an
d DLP.• Strengthen Azure cloud security across Landing Zones, subscriptions, resource groups, workloads, Private Endpoints, Service Endpoints, and segmentation bound
aries.• Support compliance and audit activities across ISO 27001, PCI DSS, Cyber Essentials Plus, GDPR, and NIST frame
works.• Participate in architecture reviews, threat modelling, risk assessments, penetration-test remediation, change governance, and DR/BCP pla
nning.
What We’re Look
ing For
• Strong Azure security experience, including Defender for Cloud, Azure Policy, Conditional Access, and identity protection
tooling.• Deep knowledge of Microsoft Entra ID, Active Directory Domain Services, MFA, PIM, RBAC, and hybrid identity s
ecurity.• Hands-on experience with Microsoft Sentinel or similar SIEM platforms, SOAR, EDR, CSPM, and vulnerability management
tooling.• Experience securing Windows Server, domain controllers, PKI/AD CS, virtual machines, and virtualisation envir
onments.• Strong understanding of Zero Trust and secure-by-design pri
nciples.• Experience working with security frameworks and standards including PCI DSS, ISO 27001, Cyber Essentials Plus, a
nd NIST.• Strong incident investigation, threat triage, and log-analysis
skills.
