Remote Microsoft Sentinel Defender, Incident Response Pro

TXP; Ribble Valley; Remote; GBP 81,000 - 90,000; Part time

Job summary

TXP is seeking a Sentinel Defender Consultant to join our security operations team remotely for a 2-month contract.

You will monitor, investigate and respond to cyber security incidents using Microsoft Sentinel and Defender suite, perform threat hunting, and contribute to incident response and detections. The role requires strong KQL skills and the ability to work independently within a SOC environment. Experience in logs analysis, Azure telemetry and producing incident reports is also preferred.

Qualifications

• Hands-on experience with Microsoft Sentinel in enterprise environments.
• Experience with Microsoft Defender platforms (Endpoint, Identity, Cloud, Office 365).
• Experience investigating and responding to cyber security incidents.
• Knowledge of security operations and incident response processes.

Responsibilities

• Monitor and investigate security alerts generated by Microsoft Sentinel and Defender.
• Perform triage and analysis of security incidents to determine impact and response.
• Conduct threat hunting to identify suspicious activity.
• Analyse logs and security telemetry from multiple data sources.
• Create, tune and optimise Sentinel analytics rules, workbooks and detection use cases.
• Support incident response activities, including containment, eradication and recovery.
• Maintain and improve security monitoring and alerting capabilities.
• Work with infrastructure, cloud, networking and application teams during investigations.
• Produce incident reports and security documentation.
• Contribute to continuous improvement of SOC processes, playbooks and detection engineering.

Skills

KQL

SOC operations

Incident response

Microsoft Sentinel

Defender for Endpoint

Defender for Identity

Defender for Cloud

Defender for Office 365

Tools

Microsoft Sentinel

Defender for Endpoint

Defender for Identity

Defender for Cloud

Defender for Office 365

Job description

TXP is seeking a Sentinel Defender Consultant to join our security operations team remotely for a 2-month contract.

You will monitor, investigate and respond to cyber security incidents using Microsoft Sentinel and Defender suite, perform threat hunting, and contribute to incident response and detections. The role requires strong KQL skills and the ability to work independently within a SOC environment. Experience in logs analysis, Azure telemetry and producing incident reports is also preferred.