Microsoft 365 Security Engineer - London, Bristol or Edinburgh

FDM is a global business and technology consultancy seeking a Microsoft 365 Security Engineer to work for our client within the Financial Services sector. This is initially a 6 - 12 month contract with the potential to extend and will be a hybrid role that will be based in London, Bristol or Edinburgh.

We are seeking an experienced Microsoft 365 Security Engineer to design, implement, manage, and optimise security solutions across our Microsoft cloud environment. The successful candidate will have extensive experience with the Microsoft security stack, including Microsoft Defender, Microsoft Entra, Microsoft Purview, and Microsoft 365 Security technologies, alongside experience integrating third-party security platforms such as CrowdStrike.

This role will be responsible for strengthening the organisation's security posture, supporting security operations, leading security improvements, and ensuring compliance with security policies and regulatory requirements.

• Design, deploy, configure, and maintain Microsoft security technologies across the Microsoft 365 ecosystem.
• Manage and optimise Microsoft Defender solutions, including Defender for Endpoint, Office 365, Identity, Cloud Apps, and XDR.
• Configure and administer Microsoft Entra security capabilities, including Conditional Access, MFA, Identity Protection, PIM, and Identity Governance.
• Implement and manage Microsoft Purview security and compliance controls, including DLP, Information Protection, Insider Risk Management, Data Lifecycle Management, and eDiscovery.
• Design and implement security controls aligned with Zero Trust principles and establish Microsoft 365 security standards and baselines.
• Conduct security assessments, architecture reviews, and remediation activities to strengthen cloud and enterprise security posture.
• Investigate security incidents, vulnerabilities, and threats, leading response activities and root cause analysis where required.
• Monitor, tune, and enhance detection and alerting capabilities across Microsoft and third-party security platforms, collaborating with Security Operations on threat hunting initiatives.
• Secure endpoint and identity environments through Microsoft Defender and CrowdStrike technologies, implementing hardening standards, threat protection policies, and compliance controls.
• Support governance, risk, compliance, and audit requirements while producing security documentation, reporting, dashboards, and providing security guidance to technical and non-technical stakeholders.