Remote Principal Security Consultant, AIR – SIEM/EDR

Trustwave Holdings, Inc.; United Kingdom; Hybrid; GBP 100,000 - 140,000; Full time

Job summary

LevelBlue is seeking a Principal Consultant to join the AIR consulting team in the UK. You will lead enterprise security engagements, designing and delivering security operations capabilities across SIEM, Identity, and EDR.

You’ll mentor consultants, shape offerings, and maintain alignment with client security strategy and budgets. You will manage multi-stakeholder engagements, deliver high-quality design documents, and present to client leadership.

Qualifications

• 10+ years in security consulting, managed security services, or SOC engineering.
• Experience leading enterprise-scale security engagements from scoping to handover.
• Proven ability to deliver senior-level documents and presentations.

Responsibilities

• Lead end-to-end AIR engagements including SOC builds, SIEM implementations, EDR deployments, and transitions.
• Produce high-quality deliverables: HLDs, LLDs, SOWs, runbooks, use-case docs.
• Plan and document client workshops, steering committees, and executive briefings.

Skills

Problem-solving

Communication

Commercial acumen

Self-direction

Collaboration

Education

Bachelor's degree preferred

Tools

Microsoft Sentinel

Splunk

EDR

Job description

LevelBlue is seeking a Principal Consultant to join the AIR consulting team in the UK. You will lead enterprise security engagements, designing and delivering security operations capabilities across SIEM, Identity, and EDR.

You’ll mentor consultants, shape offerings, and maintain alignment with client security strategy and budgets. You will manage multi-stakeholder engagements, deliver high-quality design documents, and present to client leadership.