Hands-On Security Tooling & SIEM Engineer (Remote UK)

Auxo Talent; United Kingdom; Remote; GBP 83,000 - 124,000; Full time

Job summary

Auxo Talent is seeking a hands-on Security Engineer for a client programme to strengthen security tooling and logging. The role spans endpoint, Zscaler and identity tooling with SIEM and logging using Microsoft Sentinel and Cribl, and is hands-on in nature.

This 6‑month remote assignment starts ASAP. You will work across security, infrastructure and operations teams, delivering reliable telemetry and clear documentation while maintaining security visibility and cost controls.

Qualifications

• Hands-on experience with endpoint security tooling in a production enterprise environment.
• Hands-on experience with Zscaler and identity platforms in a production enterprise environment.
• Experience with Microsoft Sentinel and Cribl, including onboarding and managing log sources.
• Ability to integrate security tools with a SIEM and troubleshoot data flow issues.
• Ability to work independently and deliver without close supervision.

Responsibilities

• Deploy, configure and tune endpoint security tooling, including policy management and agent rollout.
• Configure and manage Zscaler services, including policy, access controls and traffic steering.
• Implement and support identity tooling, including authentication policy, conditional access and privileged access controls.
• Build and maintain Microsoft Sentinel, including workspace configuration, data connectors and analytics rules.
• Design and manage Cribl pipelines for routing, filtering, enrichment and reduction of log data.
• Onboard new log sources, including those from the endpoint, Zscaler and identity tools, and make sure data is parsed, normalised and fit for detection.
• Tune detections and manage data volume and cost without losing security visibility.
• Troubleshoot issues across the tooling and logging estate and resolve them with minimal disruption to users.
• Work with the client’s security, infrastructure and operations teams, and keep stakeholders informed of progress.
• Produce clear technical documentation, including designs, configuration standards, log source inventories and handover notes.
• Operate within the client’s change governance, including change approval and maintenance windows.

Skills

Endpoint security tooling

Zscaler

Identity platforms

Microsoft Sentinel

Cribl

Log source onboarding

KQL

Scripting/Automation

Communication skills

Change governance

Tools

Microsoft Sentinel

Cribl

Zscaler

KQL

Job description

Auxo Talent is seeking a hands-on Security Engineer for a client programme to strengthen security tooling and logging. The role spans endpoint, Zscaler and identity tooling with SIEM and logging using Microsoft Sentinel and Cribl, and is hands-on in nature.

This 6‑month remote assignment starts ASAP. You will work across security, infrastructure and operations teams, delivering reliable telemetry and clear documentation while maintaining security visibility and cost controls.