https://jobs.co.uk/job/principal-microsoft-defender-xdr-irm-and-deception-engineer-wtw--0a16da7a-30f4-4782-b311-7141ae557937 RSS feed for Principal Microsoft Defender XDR, IRM and Deception Engineer at WTW. en-gb Tue, 21 Jul 2026 21:09:50 GMT https://jobs.co.uk/job/principal-microsoft-defender-xdr-irm-and-deception-engineer-wtw--0a16da7a-30f4-4782-b311-7141ae557937 https://jobs.co.uk/job/principal-microsoft-defender-xdr-irm-and-deception-engineer-wtw--0a16da7a-30f4-4782-b311-7141ae557937 Tue, 21 Jul 2026 11:52:41 GMT Location: London | Salary: 10000-500000 Annual | Type: Permanent | The Principal Microsoft Defender XDR, IRM and Deception Engineer, working within the Global Information and Cyber Security Defence (ICSD) function, is the technical leader for enterprise cyber deception and unified detection and response across the Microsoft security ecosystem. The role focuses on building, operating, and continuously evolving an enterprise-grade Insider Risk Management (IRM) and deception programme - including honeypots, honeytokens, decoy users, decoy devices, deceptive credentials, and breadcrumbs - fully integrated with Microsoft Defender XDR (Defender for Endpoint, Defender for Identity, Defender for Office 365, and Defender for Cloud Apps), Microsoft Sentinel, and Microsoft Security Copilot.The role exists to detect adversaries earlier in the kill chain by deceiving attackers into engaging with high-fidelity traps, while delivering unified detection, automated investigation, and response across endpoint, identity, email, and cloud workloads. It combines deep deception engineering expertise with hands-on Defender XDR mastery and the use of Agentic AI to drive proactive, intelligence-led, and largely autonomous security operations.The Role:Deception Engineering... Permanent