Microsoft Sentinel SIEM Content & Platform Engineer

Harvey Nash Group; City Of London; Hybride; GBP 111 000 - 166 000; Plein temps

Résumé du poste

Harvey Nash Group seeks a SIEM Content & Platform Engineer for a London-based contract role (Remote/Hybrid). The position focuses on security monitoring, detection engineering, platform optimisation, automation and enhancing enterprise cyber resilience.

The candidate will demonstrate hands-on experience with Microsoft Sentinel and Defender XDR in large enterprises, and will develop and tune analytics rules, threat hunting queries, and detection content aligned to MITRE ATT&CK.

Qualifications

• Strong hands-on experience with Microsoft Sentinel and Defender XDR in large enterprises.
• Experience developing and tuning analytics rules, threat hunting queries, and detection content aligned to security frameworks such as MITRE ATT&CK.
• Proven experience onboarding and optimising cloud, infrastructure, application and security telemetry within a SIEM platform.
• Strong automation skills using Logic Apps, Azure Functions, PowerShell, Python and REST APIs.
• Experience with security engineering, platform hardening, vulnerability remediation, technical risk assessment and operational support.
• Experience with Azure DevOps, CI/CD, Detection-as-Code, and Infrastructure-as-Code.
• Microsoft certifications such as SC-200 or AZ-500.

Responsabilités

• Act as subject matter expert across SIEM engineering, detection content development and security monitoring architecture.
• Support security monitoring operations and platform optimisation for enterprise environments.

Connaissances

Microsoft Sentinel

Microsoft Defender XDR

Logic Apps

Azure Functions

PowerShell

Python

REST APIs

Threat Hunting

MITRE ATT&CK

Automation

Outils

Azure DevOps

CI/CD

Detection-as-Code

Infrastructure-as-Code

Description du poste

Harvey Nash Group seeks a SIEM Content & Platform Engineer for a London-based contract role (Remote/Hybrid). The position focuses on security monitoring, detection engineering, platform optimisation, automation and enhancing enterprise cyber resilience.

The candidate will demonstrate hands-on experience with Microsoft Sentinel and Defender XDR in large enterprises, and will develop and tune analytics rules, threat hunting queries, and detection content aligned to MITRE ATT&CK.