Microsoft Sentinel SIEM & SOAR Threat Detection Engineer

HCL Technologies Limited; United Kingdom; Vor Ort; GBP 70.000 - 110.000; Vollzeit

Zusammenfassung

HCLTech, a global technology leader, is seeking security professionals to join its SIEM/SOC team in the United Kingdom. You will onboard telemetry for SIEM, tune detections, and develop analytics while integrating SOAR workflows and ServiceNow touchpoints.

Responsibilities include threat hunting, incident investigations, and building monitoring capabilities across cloud, endpoints, identities, and networks. Experience with Microsoft Sentinel and other SIEMs is essential.

Qualifikationen

• Experience in Security Operations, SIEM Engineering or Cyber Security Monitoring.
• Hands-on with Microsoft Sentinel: log onboarding, analytics rules, workbooks, hunting queries and incidents.
• Experience with SIEM platforms like Splunk, QRadar, ArcSight or similar.
• Knowledge of security operations, monitoring, incident response and threat hunting.
• Ability to develop and tune detection use cases to reduce false positives and improve visibility.
• Experience with SOAR platforms and automation workflows.

Aufgaben

• Identify critical applications and telemetry sources for SIEM onboarding.
• Optimise Microsoft Sentinel ingestion and cost drivers while preserving detection value.
• Develop or tune threat analytics and detection use cases.
• Plan automation, sandboxing and SOAR workflows with ServiceNow touchpoints.
• Support breach attack simulation POC and triage process improvement.
• Design, implement, and improve security monitoring and threat detection capabilities.
• Onboarding and optimization of Microsoft Sentinel and other SIEM platforms.
• Develop and maintain detection rules, alerts, dashboards, and monitoring processes.
• Build and enhance SOAR playbooks to automate security operations and incident response.

Kenntnisse

SIEM onboarding

Detection engineering

SOAR automation

Threat simulation

SOC processes

Microsoft Sentinel

Threat hunting

Incident management

Log analysis

Event correlation

MITRE ATT&CK

Defender XDR / Defender for Cloud

Entra ID

Stakeholder communication

Tools

Splunk

IBM QRadar

ArcSight

Jobbeschreibung

HCLTech, a global technology leader, is seeking security professionals to join its SIEM/SOC team in the United Kingdom. You will onboard telemetry for SIEM, tune detections, and develop analytics while integrating SOAR workflows and ServiceNow touchpoints.

Responsibilities include threat hunting, incident investigations, and building monitoring capabilities across cloud, endpoints, identities, and networks. Experience with Microsoft Sentinel and other SIEMs is essential.