Information Security Engineer
Core
Trusted Information Security advisor providing consultancy, hands-on support, and security assurance for project-based initiatives and internal changes within a global professional services firm.
Role type
Senior Information Security Engineer (Cloud & Architecture focus)
Builds
Secure cloud environments (Azure/M365), security architectures, and risk assessment frameworks for IT and business teams.
Domain
Professional Services / Legal / Cloud Security
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure
Required skills
Risk assessment, technical design reviews, Azure/M365 security suite implementation, SIEM/EDR/Vulnerability Management tools, KQL/CQL query construction, SAST/DAST technologies, CI/CD pipeline security, PowerShell/Python scripting, security architecture design, security control implementation, external security testing coordination, Cyber Defence integration.
Preferred skills
AI technology risk assessment (agentic AI/MCP), MS Purview implementation, networking/server/storage/virtualization knowledge, mentoring and guiding teams.
Technologies
Azure, Microsoft 365 E5, CrowdStrike, Microsoft Sentinel, MS Defender, Rapid7, KQL, CQL, PowerShell, Python, SAST, DAST, CI/CD pipelines.
Responsibilities
Provide internal consultancy and support for project-based initiatives and internal changes; participate in Technical Design Authority for security reviews; conduct continuous risk assessments for environment changes; collaborate with Solution Architects to embed security controls in designs; lead security assurance for cloud services (Azure/MS365); ensure compliance with Cyber Essentials Plus and CIS standards; update or create hardening standards for new technologies; coordinate external security testing (PEN/Web App) and remediation; support Cyber Defence team in onboarding new technologies and building use cases; stay current on emerging technologies and vulnerabilities; assist in developing Cyber Solution Strategy; embed Security Architecture considerations in design processes; mature Security Architecture Policies and Standards documentation.
Seniority
Senior, hands-on IC with advisory and mentorship responsibilities