IT Security Engineer
No salary listed
Mid
London, UK+1 moreMore locations: Basingstoke, UK
In Person
CybersecuritySecurity Engineering & Architecture, Security Operations & Incident Response
About the job
Requirements
- Hands-on experience with SIEM platforms for alert triage, rule management, and investigation, such as Microsoft Sentinel, Splunk, or equivalent.
- Practical experience with Defender for Endpoint, Defender for Cloud Apps, and Defender for Identity.
- Experience with vulnerability scanning, triage, and remediation tracking.
- Knowledge of identity and access management, including Entra ID or Azure AD, conditional access, privileged identity management, and access reviews.
- Incident response experience involving containment, investigation, and remediation in a real-world environment.
- At least 2–3 years in a security operations or cybersecurity role.
- Experience responding to real security incidents.
- Experience with vulnerability management in an enterprise environment.
- Track record of working with identity and access management systems in a governance or operational capacity.
- Ability to maintain sustained attention to subtle security threats.
- Ability to follow an incident response process calmly and systematically during a live security event.
- Ability to collaborate with the Cloud Platform Specialist and understand the interdependence of security and platform administration.
- Ability to communicate security risk clearly, translating technical findings into language the business can understand.
- Ability to take ownership and act when a threat is identified.
Responsibilities
- Monitor the SIEM platform and security tooling daily, triaging alerts, investigating anomalies, and escalating confirmed threats.
- Act as the named internal interface to the external SOC, receiving escalations through the on-call rota, making incident response decisions, and providing updated detection requirements to the SOC.
- Lead incident response for confirmed security events by coordinating containment, remediation, and recovery.
- Own and manage Defender for Endpoint and Defender for Cloud Apps, maintaining configuration, reviewing alerts, and tuning detection policies.
- Manage SIEM rule sets by adding detection use cases, tuning existing rules, and reviewing rule coverage.
- Own and operate the vulnerability management programme by running regular scans, triaging findings, and tracking remediation to service-level agreements.
- Oversee patching governance by ensuring the organisation's patch management process is followed and exceptions are documented.
- Maintain alignment with compliance frameworks such as Cyber Essentials and ISO 27001, or equivalent frameworks.
- Own Purview Compliance by maintaining audit log policies, eDiscovery configuration, and retention policies.
- Own the organisation's identity and access management discipline, including Entra ID, privileged identity management, and access governance.
- Monitor the joiner/mover/leaver process to ensure accounts are provisioned, modified, and deprovisioned accurately and on time.
- Run and manage access reviews and access certification cycles to enforce least privilege.
- Manage privileged accounts, ensuring privileged access is logged, reviewed, and time-bound where possible.
- Review new AI tool requests from a security risk perspective, assessing data handling, access scoping, and prompt injection risk.
- Ensure approved AI tools are correctly scoped and monitored, and feed AI-related security findings into the risk register.
Desired Qualifications
- Security certifications such as SC-200, CompTIA Security+, CySA+, CEH, or equivalent.
- Experience with Purview Compliance workloads, including eDiscovery, audit logs, and retention.
- Familiarity with ISO 27001, Cyber Essentials Plus, or NIST CSF.
- Experience working with or managing an external SOC relationship.
- Experience in a peer-model security team or SOC environment.
- Exposure to a regulated industry with compliance requirements.
- Interest in emerging threats and staying current with the security landscape.
About the company
Penningtons Manches Cooper is a UK and international law firm offering business and private client legal services. It operates from offices across the UK and via an overseas network in Singapore, Piraeus, Paris and Madrid, handling dispute resolution, corporate and commercial, real estate, private client and family matters. The firm is known for strengths in private wealth, shipping, technology and property, with additional expertise in life sciences, education, retail, sports and entertainment, and international trade. Its aim is to deliver high-quality advice and build long-term client relationships through cross-border capability and collaboration with global networks.
Company Size
501-1,000
Company Stage
N/A
Total Funding
N/A
Headquarters
London, United Kingdom
Founded
N/A
Get referred to Penningtons Manches Cooper
See people who can refer or advise you
Simplify's Take
What believers are saying
- 2025-26 revenue reached £125.7 million, confirming demand across core practices.
- Robert Dransfield joined in March 2026, strengthening high-value medical negligence litigation.
- One Nucleus renewed in August 2026, preserving life sciences pipeline and referrals.
What critics are saying
- Rachel Yao's Singapore platform depends on regulatory approval and immediate deal flow.
- Private wealth, trade finance, and shipping expansions stretch management across three geographies.
- A Singapore misfire would blunt international ambitions and leave hiring costs unrecovered.
What makes Penningtons Manches Cooper unique
- Seventeen straight growth years and £125.7 million revenue anchor Penningtons Manches Cooper's platform.
- Private wealth expansion into Singapore with Rachel Yao targets cross-border Asian families.
- Deep sector focus in life sciences, medical negligence, and shipping supports specialist origination.
Help us improve and share your feedback! Did you find this helpful?
Benefits
- Remote Work Options
- Hybrid Work Options
- Flexible Work Hours