Remote SIEM & SOAR Engineer – Microsoft Sentinel (UK)

HCL Technologies Limited; United Kingdom; Remote; GBP 70,000 - 100,000; Full time

Job summary

HCL Technologies Limited is seeking a SIEM Consultant for a remote UK role focused on Microsoft Sentinel onboarding, detection engineering, and threat detection. You will design and optimise SIEM processes, build SOAR playbooks, and drive proactive threat hunting across cloud, endpoint, identity, and network environments.

The position involves collaboration with SOC teams, security stakeholders, and technology partners to enhance monitoring maturity and incident response capabilities while

Qualifications

• Security Operations, threat detection, incident response experience.

Responsibilities

• Identify critical applications and telemetry sources for SIEM onboarding.
• Optimise Microsoft Sentinel ingestion and cost drivers while preserving detection value.
• Develop or tune threat analytics and detection use cases.
• Plan automation, sandboxing and SOAR workflows with ServiceNow integration touchpoints.
• Support breach attack simulation POC and triage process improvement.
• Design, implement, and continuously improve security monitoring and threat detection capabilities across the organization.
• Onboarding, configuration, and optimization of Microsoft Sentinel and other SIEM platforms.
• Develop and maintain detection rules, use cases, alerts, dashboards, and security monitoring processes.
• Build and enhance SOAR playbooks to automate repetitive security operations and incident response activities.
• Perform threat hunting, incident investigations, and root cause analysis to identify and address security threats.
• Integrate security tools, cloud platforms, endpoints, and network devices into the SIEM ecosystem.
• Work closely with SOC analysts, security teams, and technology stakeholders to improve visibility, detection coverage, and response effectiveness.
• Provide recommendations to strengthen the organization's overall security posture and monitoring maturity.

Skills

Security Operations

Threat Detection

Incident Response

Threat Hunting

Analytical Thinking

Stakeholder Communication

Tools

Microsoft Sentinel

Splunk

IBM QRadar

ArcSight

SOAR

ServiceNow

Defender XDR

Entra ID

Job description

HCL Technologies Limited is seeking a SIEM Consultant for a remote UK role focused on Microsoft Sentinel onboarding, detection engineering, and threat detection. You will design and optimise SIEM processes, build SOAR playbooks, and drive proactive threat hunting across cloud, endpoint, identity, and network environments.

The position involves collaboration with SOC teams, security stakeholders, and technology partners to enhance monitoring maturity and incident response capabilities while