Cyber Investigator - Insider Risk (Microsoft Purview)

Cyber Investigator - Insider Risk (Microsoft Purview)

Posted 1 day ago by Totaljobs

£700 Per day
Outside
Hybrid
The City, City of London (EC2), EC2M 2QA

Summary: This Cyber Investigator role focuses on enhancing Insider Risk capabilities within a financial environment through hands-on integration and optimization of Microsoft Purview solutions. The position involves designing and implementing security integrations, improving detection logic, and collaborating with internal teams. The role offers a strong day rate and a hybrid working model with minimal onsite requirements. Candidates will work with Azure, Sentinel, and automation tools to deliver critical security improvements.

Key Responsibilities:

  • Design and deliver integrations into Microsoft Purview to enhance Insider Risk capability
  • Implement data ingestion across multiple platforms including Salesforce and Workday
  • Configure and optimise Insider Risk policies, classifiers and agent functionality
  • Build automation and workflows using Azure, Sentinel and Logic Apps
  • Improve detection logic, alerting accuracy and response automation
  • Collaborate with internal teams to align integrations with existing security architecture

Key Skills:

  • Strong hands-on experience with Microsoft Purview, including Insider Risk or DLP
  • Previous experience integrating data sources into security or monitoring platforms
  • Experience working with Azure, Microsoft Sentinel and automation tools such as Logic Apps
  • Proven ability to deliver within complex, regulated environments
  • Experience working within agile or Kanban-based delivery teams

Salary (Rate): £700 per day

City: The City, City of London

Country: United Kingdom

Working Arrangements: hybrid

IR35 Status: outside IR35

Seniority Level: Mid-Level

Industry: IT

Detailed Description From Employer:

This is a Cyber Investigator opportunity where you’re not just observing risk, you’re actively shaping how it’s detected, understood, and controlled across a complex financial environment. This is a hands-on contract inside a high-performing cyber engineering function, focused on delivering real, tangible improvements to Insider Risk capabilities through Microsoft Purview. You’ll be building, integrating, and optimising solutions that directly strengthen how sensitive data is protected and monitored.

What’s in it for you

  • High-impact work delivering critical security integrations in a regulated environment
  • Immediate involvement in a prioritised backlog with visible outcomes
  • Strong day rate outside IR35
  • Hybrid working model with minimal onsite requirement
  • Opportunity to work across Azure, Sentinel and automation tooling
  • Exposure to complex, enterprise-scale security architecture

Your responsibilities as Cyber Investigator

  • Design and deliver integrations into Microsoft Purview to enhance Insider Risk capability
  • Implement data ingestion across multiple platforms including Salesforce and Workday
  • Configure and optimise Insider Risk policies, classifiers and agent functionality
  • Build automation and workflows using Azure, Sentinel and Logic Apps
  • Improve detection logic, alerting accuracy and response automation
  • Collaborate with internal teams to align integrations with existing security architecture

What we’re looking for in a Cyber Investigator

  • Strong hands-on experience with Microsoft Purview, including Insider Risk or DLP
  • Previous experience integrating data sources into security or monitoring platforms
  • Experience working with Azure, Microsoft Sentinel and automation tools such as Logic Apps
  • Proven ability to deliver within complex, regulated environments
  • Experience working within agile or Kanban-based delivery teams

If you’re a Cyber Investigator ready to deliver meaningful security improvements from day one, apply now. Candidate Source Ltd is an advertising agency. Once you have submitted your application it will be passed to the third party Recruiter who is responsible for processing your application. This will include holding and sharing your personal data, our legal basis for this is legitimate interest subject to your declared interest in a job. Our privacy policy can be found on our website and we can be contacted to confirm who your application has been forwarded to.