IDP Education - Senior Security Engineer - SIEM/SOAR

The Senior Security Engineer - Platforms, Digital Workplace & AI Enablement sits within IDPs Security Platforms and Engineering team and provides senior, hands-on engineering capability across security platforms, Digital Workplace security, vulnerability management, patching governance, reporting, automation, penetration testing, AI enablement and security engineering practices.

This role is designed for a highly technical, experienced and proactive engineer who works beyond task execution. The successful candidate will engage with business and technology stakeholders, understand requirements, translate needs into practical security solutions, and contribute to both tactical short-term fixes and strategic long-term roadmap outcomes.

As IDP moves towards a domain-led, platform-driven operating model, this role will help mature security and Digital Workplace platforms move from reactive support into a standardised, measurable, automated and well-governed capability, with specific focus on uplifting the newly integrated Digital Workplace team.

The role supports the Security Platforms and Engineering roadmap across Microsoft Defender, Intune, Purview, Defender for Office 365, SharePoint, OneDrive, Exchange Online, Netskope, Splunk, Ivanti Neurons, and other platforms within the teams ownership boundary.

The successful candidate will also support IDPs AI-ready security engineering direction by understanding how AI works, being on the path to building AI agents, safely applying AI to reduce toil, contributing to automation use cases, and helping improve process maturity across security platforms.

Key Performance Areas & Platform Engineering & Technical Leadership

• Act as a senior hands-on technical engineer across IDPs Security Platforms and Engineering capability.
• Design, configure, maintain, optimise and continuously improve IDPs core security platforms as reliable products.
• Drive secure baselines, platform standards, operational health, monitoring, upgrades, incident/problem management, vendor case management and lifecycle management.
• Identify platform gaps, configuration drift and operational risks; proactively recommend and execute remediation plans.
• Provide technical leadership across Microsoft Defender, Intune, Purview, Defender for Office 365, SharePoint, OneDrive, Exchange Online, Netskope, Splunk and Ivanti Neurons.

• Partner with the Head of Security Platforms and Engineering to shape and deliver the team roadmap.
• Engage with business and technology stakeholders to understand requirements, pain points and risks, and translate them into pragmatic technical options.
• Develop tactical solutions for urgent short-term issues and strategic solutions aligned to IDPs long-term security and workplace direction.
• Prepare clear solution options, recommendations, trade-offs and operational support models.
• Act as a trusted senior technical contact for security platforms and Digital Workplace security across the business.

• Mature IDPs vulnerability management and patching capability across endpoints, servers, cloud workloads, SaaS and workplace devices.
• Operate and uplift Ivanti Neurons and related reporting views for patching, vulnerability compliance, remediation accountability and executive visibility.
• Drive risk-based prioritisation using severity, exploitability, business context and known exploited vulnerability inputs.
• Partner with Infrastructure, Cloud Ops, Service Desk, SOC and Cyber & Technology Risk on practical remediation patterns.
• Deliver monthly reporting, dashboards, SLA tracking, exception management and audit-ready evidence.

• Mature IDPs security testing and penetration testing capability by coordinating findings, remediation tracking, reporting and knowledge sharing.
• Work with internal stakeholders and external testing partners to ensure findings are understood, prioritised and translated into practical remediation actions.
• Connect pen testing outcomes with vulnerability management, patching, secure configuration, platform standards and risk reporting.
• Continuously improve testing processes, evidence collection, remediation governance and lessons learned.

• Maintain a strong working knowledge of how AI works including LLMs, prompt design, AI agents and safe AI adoption in enterprise security contexts.
• Be actively on the path to learning to build AI agents and contribute to IDPs agent-based security and Digital Workplace use cases.
• Identify practical AI and automation use cases that reduce manual effort, improve triage, accelerate reporting and simplify operational workflows.
• Ensure AI enablement aligns with IDPs data governance, privacy, access control and security expectations, supporting DSPM and AI governance direction.

• Operationalise DLP, CASB and SaaS controls across Netskope and Microsoft 365 / Purview.
• Design and maintain practical exception pathways with appropriate approvals, auditability and alignment to access controls.
• Govern secure collaboration, external sharing, data protection monitoring and control tuning across the Digital Workplace estate.
• Contribute to AI-ready data governance foundations by reducing oversharing risk and improving access hygiene.

• Operate platforms and processes in line with IDPs cyber security policies, risk appetite, privacy obligations and governance expectations.
• Maintain reliable evidence, documentation, runbooks, SOPs, configuration records and reporting for owned platforms.
• Support exception handling where vulnerabilities, patching gaps or platform risks cannot be remediated within expected timeframes.
• Partner with Cyber & Technology Risk to ensure risks, exceptions and remediation actions are visible, tracked and reported.

• Operate with high autonomy, ownership and accountability; be self-managed and proactive rather than direction-led.
• Proactively identify problems, recommend improvements and drive outcomes without waiting for detailed instructions.
• Learn new platforms and processes quickly across the broad tool set under the team.
• Mentor and uplift other engineers across Security Platforms and Engineering and the Digital Workplace team.
• Maintain a continuous improvement mindset focused on automation, standardisation and measurable outcomes.

• Significant hands-on experience as a senior security engineer across security platforms, infrastructure, endpoint, cloud or modern workplace security.
• Practical experience with vulnerability management, patching governance, remediation tracking, reporting and security compliance uplift.
• Experience with SIEM/SOAR, detection engineering, dashboards, alerting and automation, preferably Splunk.
• Understanding of DLP, CASB, SaaS security, EDR, secure configuration baselines and access governance.
• Proven ability to engage with business stakeholders and translate requirements into practical secure solutions.
• Proven ability to design both tactical short-term fixes and strategic long-term solutions.
• Demonstrated experience supporting penetration testing programmes and remediation governance.
• Strong documentation capability including runbooks, SOPs, service boundaries and operational reporting.
• Self-managed, proactive and comfortable working with ambiguity; strong sense of ownership and accountability.
• Quick learner with the ability to pick up new platforms and processes rapidly across a broad tool set.
• Working knowledge of how AI works, with active interest in building AI agents and applying AI to security and workplace use cases.
• Experience across Microsoft Defender, Intune, Purview, SharePoint and OneDrive would be highly regarded and considered an added advantage.

• Benefit from rewarding experiences.
• Become part of our connected global community, feel included and celebrate our diversity every day.
• Work alongside enthusiastic and passionate colleagues who are working towards the same goal of changing the world for the better, through global education.
• Thrive in an innovative agile digital culture.
• Be inspired and mentored by our courageous leaders who are authentic and approachable.

(ref:hirist.tech)