Security Engineer

Security Engineer 6-Month Contract | £700-£800 per day (Umbrella)Hybrid Working | Midlands-based office visit approximately once per month The Opportunity We're supporting a leading organisation operating within a highly regulated and nationally significant environment as they continue to build and mature a new Microsoft cloud security estate.

This is a hands-on Security Engineer position suited to someone who enjoys improving security posture, implementing controls and solving security challenges in an evolving environment. You'll play a key role in strengthening the organisation's cyber security capabilities while helping prepare the environment for an upcoming penetration test programme over the next 3-6 months.

The team are looking for someone who can work autonomously, identify potential weaknesses before they become audit or pen-test findings, and drive remediation activities from start to finish. Key Responsibilities

Implement, configure and maintain security controls across the Microsoft security ecosystem.

Identify security gaps and drive remediation activities to improve overall security posture.

Support the preparation, coordination and remediation of external penetration testing engagements.

Implement and manage identity, access management and privileged access controls.

Configure and maintain Conditional Access, RBAC and Privileged Identity Management controls.

Improve device, identity, data and cloud security controls across the estate.

Support audit, assurance and compliance activities.

Work closely with architecture, security operations and wider technology teams to deliver security improvements.

Contribute to security hardening initiatives and CIS control implementation.

Essential Skills & Experience

Strong Security Engineering background.

Hands-on experience with

Microsoft Entra ID

Microsoft Intune

Microsoft 365 Security

Microsoft Azure

Microsoft Purview

Experience implementing and assessing CIS security controls.

Previous experience remediating vulnerabilities and penetration testing findings.

Strong understanding of

Identity & Access Management (IAM)

RBAC

Privileged Access Management

Least Privilege principles

Experience working in cloud-first Microsoft environments.

Ability to work independently and proactively identify security improvements.

Strong stakeholder engagement and communication skills.

Desirable Experience

Experience preparing environments ahead of external penetration testing.

Exposure to regulated, critical infrastructure or highly secure environments.

Experience working alongside Security Operations or Incident Response teams.

Microsoft or security certifications such as SC-200, SC-300, SC-400, AZ-500, CISSP or CCSP.

Suitable Backgrounds This role would suit a:

Security Engineer

Cloud Security Engineer

Microsoft Security Engineer

Identity & Access Management Engineer

Azure Security Engineer

Cyber Security Engineer

who enjoys hands-on technical delivery and taking ownership of security improvements within a developing environment.

Pontoon is an employment consultancy. We put expertise, energy, and enthusiasm into improving everyone's chance of being part of the workplace. We respect and appreciate people of all ethnicities, generations, religious beliefs, sexual orientations, gender identities and more. We do this by showcasing their talents, skills, and unique experience in an inclusive environment that helps them thrive.

We use generative AI tools to support our candidate screening process. This helps us ensure a fair, consistent, and efficient experience for all applicants. Rest assured, all final decisions are made by our hiring team, and your application will be reviewed with care and attention.