About this role
Principal Microsoft Defender XDR & Deception Engineer at WTW. Location: Reigate or London or Spain. Role: leading deception, designing deception, operating detection Requirements: Proven experience designing and operating enterprise deception programmes and Microsoft Defender XDR; strong detection engineering (KQL), incident response, scripting (PowerShell/Python), and identity/Zero Trust expertise; Microsoft security stack mastery. Category: Information Technology Seniority: Senior Level Tools: Microsoft Defender XDR, MDE, MDI, MDO, MDA, Microsoft Sentinel, Microsoft Security Copilot, Microsoft Defender for Cloud Apps, Microsoft Defender for Cloud, Thinkst Canary, T-Pot, Cowrie, OpenCanary, Zscaler Deception, KQL, Microsoft Purview, Microsoft Sentinel SOAR, Logic Apps, PowerShell, Python Certifications: sc-200, az-500, sc-100, cissp, gcia, gcfa, gcih, oscp Commitment: Full Time Workplace: Hybrid Languages: English