Job Description
Full job description
Description
Love the buzz of turning noisy security data into sharp, automated defence? At NCC Group, you’ll help well-known brands get the most from Microsoft’s security stack — designing Sentinel-led detection and response, wiring up smart SOAR playbooks, and shaping XDR strategy that actually lands. It’s hands-on, high-impact work with a team that backs experimentation, knowledge-sharing and doing things properly.
Key Responsibilities
Build & tune Microsoft Sentinel: data connectors, normalisation, analytics rules, UEBA, watchlists, workbooks and cost-savvy ingestion strategies.
Orchestrate & automate: create pragmatic SOAR playbooks (Logic Apps/Power Automate) that slash MTTR and remove toil.
XDR in the real world: deploy and optimise Microsoft Defender XDR across endpoints, identity, email and cloud; align detections to MITRE ATT&CK and real threats.
Hunt & respond: KQL-led threat hunting, incident triage guidance, detection content packs, purple-team style improvements.
Secure the data: advise on Purview information protection & DLP, from policy design to pilot and rollout.
Make it land: roadmaps, runbooks, and regular stakeholder updates — translating deep technical detail into business-ready outcomes.
Coach & mentor: guide junior consultants; share patterns, reusable content and lessons learned.
Shape opportunities: support presales scoping, proposals and estimation for consulting and implementation work.
Skills, Knowledge & Expertise
Proven experience delivering Microsoft security projects: Sentinel (must-have), Defender XDR, SOAR (Logic Apps), and Purview/DLP.
Comfortable with KQL and scripting (PowerShell); version control with Git.
A knack for cost optimisation (ingestion, retention, table choices, Basic vs Analytics).
Solid consulting skills — workshops, architecture reviews, stakeholder management and great written reports.
Familiarity with control frameworks (ISO 27001, NIST CSF/800-53, PCI DSS, GDPR) and how to evidence them in Microsoft cloud.
Nice-to-haves (not show-stoppers)
Azure Resource Manager/Bicep or IaC pipelines; Entra ID/Conditional Access; Defender for Cloud; Intune; MITRE mapping; incident response exposure; certifications such as SC-200/SC-100, CISSP/CISM, ISO 27001 LA/LI, PCI QSA.
Ways of working
Focusing on Clients and Customers.
Working as One NCC.
Always Learning.
Being Inclusive and Respectful.
Delivering Brilliantly
Job Benefits
We have a high-performance culture which is balanced evenly with world-class well-being initiatives and benefits:
Flexible Working: Balance your work and personal life with our flexible working options.
Generous Holiday Allowance: Enjoy 25 days of holiday, plus bank holidays, with the option to buy up to 5 additional days of annual leave.
Medicash & Critical Illness Scheme
Financial & Investment Benefits: Enjoy peace of mind with our Pension, Life Assurance, and Share Save Scheme.
Community & Volunteering Programmes: Make a difference in your community with our volunteering opportunities.
Green Car Scheme: Drive green and save money with our eco-friendly car scheme.
Cycle Scheme: Stay fit and healthy with our cycle-to-work scheme.
Special Time Off: Take time off for those big moments in life, like getting married/entering into a civil partnership, becoming a grandparent, and welcoming home a new pet.
Family Planning: Benefit from our generous maternity and paternity leave, as well as time off and support for those undergoing fertility treatments.
About NCC Group
We assess, develop and manage cyber threats across our increasingly connected society. We advise global technology, manufacturers, financial institutions, critical national infrastructure providers, retailers and governments on the best way to keep businesses, software and personal data safe.
With our knowledge, experience and global footprint, we are best placed to help businesses identify, assess, mitigate & respond to the risks they face.
We are passionate about making the Internet safer and revolutionising the way in which organisations think about cyber security.
Headquartered in Manchester, UK, with over 35 offices across the world, NCC Group employs more than 2,000 people and is a trusted advisor to 15,000 clients worldwide.
Description
Love the buzz of turning noisy security data into sharp, automated defence? At NCC Group, you’ll help well-known brands get the most from Microsoft’s security stack — designing Sentinel-led detection and response, wiring up smart SOAR playbooks, and shaping XDR strategy that actually lands. It’s hands-on, high-impact work with a team that backs experimentation, knowledge-sharing and doing things properly.
Key Responsibilities
Build & tune Microsoft Sentinel: data connectors, normalisation, analytics rules, UEBA, watchlists, workbooks and cost-savvy ingestion strategies.
Orchestrate & automate: create pragmatic SOAR playbooks (Logic Apps/Power Automate) that slash MTTR and remove toil.
XDR in the real world: deploy and optimise Microsoft Defender XDR across endpoints, identity, email and cloud; align detections to MITRE ATT&CK and real threats.
Hunt & respond: KQL-led threat hunting, incident triage guidance, detection content packs, purple-team style improvements.
Secure the data: advise on Purview information protection & DLP, from policy design to pilot and rollout.
Make it land: roadmaps, runbooks, and regular stakeholder updates — translating deep technical detail into business-ready outcomes.
Coach & mentor: guide junior consultants; share patterns, reusable content and lessons learned.
Shape opportunities: support presales scoping, proposals and estimation for consulting and implementation work.
Skills, Knowledge & Expertise
Proven experience delivering Microsoft security projects: Sentinel (must-have), Defender XDR, SOAR (Logic Apps), and Purview/DLP.
Comfortable with KQL and scripting (PowerShell); version control with Git.
A knack for cost optimisation (ingestion, retention, table choices, Basic vs Analytics).
Solid consulting skills — workshops, architecture reviews, stakeholder management and great written reports.
Familiarity with control frameworks (ISO 27001, NIST CSF/800-53, PCI DSS, GDPR) and how to evidence them in Microsoft cloud.
Nice-to-haves (not show-stoppers)
Azure Resource Manager/Bicep or IaC pipelines; Entra ID/Conditional Access; Defender for Cloud; Intune; MITRE mapping; incident response exposure; certifications such as SC-200/SC-100, CISSP/CISM, ISO 27001 LA/LI, PCI QSA.
Ways of working
Focusing on Clients and Customers.
Working as One NCC.
Always Learning.
Being Inclusive and Respectful.
Delivering Brilliantly
Job Benefits
We have a high-performance culture which is balanced evenly with world-class well-being initiatives and benefits:
Flexible Working: Balance your work and personal life with our flexible working options.
Generous Holiday Allowance: Enjoy 25 days of holiday, plus bank holidays, with the option to buy up to 5 additional days of annual leave.
Medicash & Critical Illness Scheme
Financial & Investment Benefits: Enjoy peace of mind with our Pension, Life Assurance, and Share Save Scheme.
Community & Volunteering Programmes: Make a difference in your community with our volunteering opportunities.
Green Car Scheme: Drive green and save money with our eco-friendly car scheme.
Cycle Scheme: Stay fit and healthy with our cycle-to-work scheme.
Special Time Off: Take time off for those big moments in life, like getting married/entering into a civil partnership, becoming a grandparent, and welcoming home a new pet.
Family Planning: Benefit from our generous maternity and paternity leave, as well as time off and support for those undergoing fertility treatments.
About NCC Group
We assess, develop and manage cyber threats across our increasingly connected society. We advise global technology, manufacturers, financial institutions, critical national infrastructure providers, retailers and governments on the best way to keep businesses, software and personal data safe.
With our knowledge, experience and global footprint, we are best placed to help businesses identify, assess, mitigate & respond to the risks they face.
We are passionate about making the Internet safer and revolutionising the way in which organisations think about cyber security.
Headquartered in Manchester, UK, with over 35 offices across the world, NCC Group employs more than 2,000 people and is a trusted advisor to 15,000 clients worldwide.
💡 Quick Summary
Seeking a career-building opportunity? The Senior Engineer - MXDR position is now open for candidates interested in the Back Office Jobs sector. This role in Sydney offers a professional environment and growth potential.
Requirement Snapshot: Candidates should possess basic communication skills, a proactive attitude, and the ability to work in a team. Experience in Back Office Jobs is a plus.
