Information Security Engineer

About the role

Freshfields is looking for a Security Specialist with hands-on experience across Azure, M365 and preferably Google Cloud Platform, covering cloud security assessment, monitoring advisory, access control, compliance and governance, and cyber incident response. The Information Security Group (ISG) delivers operational and strategic cyber security and business continuity and is based mainly in the London and Manchester offices.

Key responsibilities

• Assess Azure IaaS and Google Cloud security configurations and give recommendations based on best practice and emerging threats
• Support Cyber Incident Responders with cloud security expertise when needed
• Evaluate and optimise Azure Defender and other security monitoring tools, improving threat detection and response
• Assess and improve Conditional Access policies and IAM, enforcing zero trust and least privilege
• Ensure cloud environments meet regulatory and internal governance requirements, and run periodic security audits and risk assessments
• Maintain security tools such as SIEM and vulnerability scanners, manage upgrades and configuration changes
• Support the wider cyber incident response function using SIEM, EDR and IdP tools

Required profile

• Experience in an IT engineering capacity
• Hands-on experience administering Azure security environments
• Strong experience managing compute, network and storage resources across cloud and hybrid environments
• Broad knowledge of infrastructure, software development, databases, cloud platforms and IAM
• Strong engineering background with Windows Server, endpoint platforms, macOS and Linux
• Knowledge of information security frameworks such as NIST and the NIST 800-series
• Excellent written and verbal communication, able to explain technical concepts to technical and non-technical audiences

Required skills

• Azure, Microsoft Defender, Conditional Access and Google Cloud security tools
• SIEM platforms, vulnerability management tools and data ingestion, monitoring and alerting
• Terraform and infrastructure-as-code best practices
• Desirable: Microsoft Certified: Azure Security Engineer Associate, Google Professional Cloud Security Engineer or equivalent