Microsoft Sentinel SIEM Engineer – Hybrid London Contract

Curo Services; Greater London; Híbrido; GBP 92.000 - 111.000; A tiempo parcial

Descripción de la vacante

Curo Services is seeking an experienced SIEM Content & Platform Engineer to join their Cyber Security team in London. The role combines threat detection engineering with platform architecture across Sentinel and Defender ecosystems.

You will design and tune detection content, build data pipelines, and contribute to incident response and governance. The contract runs for ~5 months with a rate of £550, onsite 2 days/week, remote remainder, outside IR35.

Formación

• Experience in SIEM/detection engineering for enterprise environments.
• Strong design and implementation of detection content and rules.
• Hands-on with Microsoft Sentinel and Defender XDR.
• Experience with REST APIs, PowerShell and Python, plus CI/CD.

Responsabilidades

• Act as SME for Microsoft Sentinel and security monitoring architecture.
• Design, test, deploy and tune analytics rules and queries aligned to MITRE ATT&CK.
• Engineer data connectors, ingestion pipelines and custom parsers.
• Develop logging standards, onboarding patterns and governance.
• Lead platform enhancements and support during critical incidents.

Conocimientos

Detection engineering

Threat hunting

Automation

Security architecture

MITRE ATT&CK

Educación

Bachelor's degree in IT or Cyber Security

SC-200 or AZ-500 desirable

Cloud, SIEM or automation certifications advantageous

Herramientas

Microsoft Sentinel

Defender XDR

KQL

Logic Apps

Azure Functions

REST APIs

PowerShell

Python

Data Collection Rules

Parsers

Workbooks

Playbooks

Cribl

Descripción del empleo

Curo Services is seeking an experienced SIEM Content & Platform Engineer to join their Cyber Security team in London. The role combines threat detection engineering with platform architecture across Sentinel and Defender ecosystems.

You will design and tune detection content, build data pipelines, and contribute to incident response and governance. The contract runs for ~5 months with a rate of £550, onsite 2 days/week, remote remainder, outside IR35.