La Fosse has partnered with a globally known Retailer who are looking to bolster their Security Engineering function. This role sits at the technical heart of the cyber security function, with ownership for designing, implementing, and maturing security controls across the organisation’s technology estate, with a particular focus on Microsoft Azure.
It exists to ensure security is engineered into platforms and applications from the outset rather than applied as an afterthought.
What you’ll be doing
* Leading security reviews for new and existing systems to ensure platforms and applications are secure by design
* Designing and implementing network and cloud security controls across on-prem and Azure environments, including segmentation, firewalling, and detection capabilities
* Acting as the technical authority for Azure security, setting standards and driving best practice
* Designing and operating Azure-native security controls including Defender for Cloud, Sentinel, Entra ID, Key Vault, and Azure Firewall
* Improving cloud security posture management, vulnerability detection, and remediation tracking
* Partnering with system owners and engineers to prioritise and fix risk rather than just report on it
* Supporting application security by advising on secure coding, CI/CD integration, and security testing approaches
* Contributing to incident response as a senior technical escalation point when required
Required Experience
* Strong hands-on experience securing Microsoft Azure environments at scale
* Deep understanding of network security fundamentals across cloud and on-prem
* Experience designing security controls rather than just operating tools
* Background in senior-level security engineering, architecture, or security consulting
* Ability to translate technical risk into clear, practical guidance for engineers and stakeholders
* Azure security or architecture certifications such as AZ-500 or SC-100
* Experience influencing security design in large or complex environments