Security Engineer
kocho · Cardiff, United Kingdom ·
- Work mode
- Onsite
- Category
- Security
- Company size
- 51-200
kocho · Cardiff, United Kingdom ·
kslaw · Atlanta, Georgia
Codincity Digital Technologies · Chennai, Tamil Nadu, India
Antal Sp. z o.o.
brownadvisory · Baltimore, MD
Security Engineer designs and implements Microsoft Defender XDR/Sentinel defenses, writes KQL rules, and audits client environments to harden identity-first security postures.
We are Kocho
Kocho is the original Microsoft identity‑centric security partner, delivering transformational services for UK organisations. We secure every identity first - then use that foundation to strengthen security, modernise cloud and apps, and keep everything running through leading managed services, and managed security operations.
You’ll be joining a team that’s trusted by organisations to deliver at scale. As an eight‑time Microsoft Partner of the Year winner and one Microsoft’s most decorated UK partners.
Our work speaks for itself:
Our head office is in the heart of London, with additional offices in Cardiff and Cape Town, providing a comfortable working environment with flexible collaboration spaces. And we’re guided by our core values: Do What’s Right, Think Greater, and Better Together.
Kocho is an equal opportunities employer. We make recruitment decisions based on qualifications, skill set and experiences We consider all suitable candidates regardless of their age, sex, gender reassignment, race, pregnancy and maternity, religion or belief, marital status, disability or sexual orientation. This is mindset aligns with our company values as we understand that we are Better Together.
Here is the role:
As a Security Engineer, you will be a trusted, friendly face for our clients, pairing technical know-how with the people skills to explain it clearly. Working within the Cyber Security Delivery Team and reporting to the Cyber Security Delivery Manager, you will answer client questions, research and deliver clear technical recommendations, and help clients get the very best from their Microsoft security investment.
This role is primarily remote but you may be asked to come into the Cardiff or London Office at your manager's discretion, and we would expect a successful candidate to always attend when required. We anticipate this to be a couple of times a month.
Our Delivery Team own the day-to-day client relationship. You will be their technical partner, joining client calls when needed to explain options, answer detailed questions and give confident, practical guidance. You will work across the Microsoft security stack, including Microsoft Defender XDR, Microsoft Entra, Microsoft Defender for Cloud Apps, Exchange Online and Microsoft Sentinel, with support from our senior engineers as you deepen your expertise.
You will validate every technical request that comes into the team. That means checking whether it is in scope, whether it is the right approach, and whether it aligns with best practice. Where you can, you
will configure changes in client environments yourself. Where a request needs deeper engineering, you will triage it and escalate to our senior engineering resources, who will take ownership.
We know great candidates come from many backgrounds. If you are a confident communicator who enjoys building relationships with clients, and you are still developing your technical skills, we would love to hear from you. We will invest in your training and certifications so you can grow into the role.
Your responsibilities will include:
Where applicable, you may also use scripting or automation skills (for example Python, Bicep, ARM, JSON or YAML) and contribute to Azure Logic Apps, Azure Functions or codeless playbooks to improve operational efficiency.
This is what we need from you:
Would be great if you have:
INGEPSY · Medellín, Colombia