Security Engineer - Cloud/Appsec

£600-£650 p.d

Outside IR35

Occasional Travel to Leeds Office

3 months + Likely extension

Start Date - ASAP

Key Responsibilities:

• Secure Configurations & Compliance Implementation:
• Planning and implementation of the Center for Internet Security Microsoft Dynamics 365 Power Platform benchmark.
• Planning and implementation of the Center for Internet Security Microsoft 365 Foundations Benchmark.
• Collaborating with cloud and DevOps engineers to refactor Terraform code for secure configurations and compliance with the Center for Internet Security Microsoft Azure Foundations Benchmark.
• Work with colleagues to raise any required exceptions with Information Security Governance Risk and Compliance so that any associated operational risk is identified, assessed and managed.
• Work with Security Operations to onboard Azure Landing Zones into Qualys Total Cloud and address any findings relating to non-compliance.
• Auditing configurations in order to plan remediations and verify compliance requirements are met.
• SIEM Integration and Configuration for Microsoft Cloud Services:
• Configure cloud services and Defender for Cloud for integration with Rapid7 InsightIDR SIEM to enhance security monitoring and incident response capabilities.
• Integrate SIEM for monitoring Entra ID sign-in, audit, and risk log categories.
• Work with Security Operations to build and test required alert/detection rules

Experience:

• Professional experience in cloud security, particularly with Microsoft Azure, Entra ID and Microsoft 365.
• Proficiency with Rapid7 InsightIDR, Qualys, and CrowdStrike or similar security operations tools.
• Experience in implementing secure configurations, security benchmarks and compliance standards.
• Strong understanding of network security and cloud infrastructure.
• Familiarity with DevOps practices and toolchains, particularly Azure DevOps, git repositories, build and deployments pipelines, Terraform, Azure CLI and PowerShell.
• Familiarity with software development languages and frameworks such as JavaScript, C#, J2EE and .Net.
• Excellent problem-solving skills and attention to detail.