Remote UK Senior Security Content Engineer

BlueVoyant; Greater London; Hybrid; GBP 120,000 - 170,000; Full time

Benefits offered by this job

Competitive compensation

Wellbeing support and development

Career growth opportunities

Job summary

BlueVoyant is seeking a Senior Security Content Engineer to join the Threat Fusion Cell in a fully remote role. You will develop detection logic, automation, and visualizations to deliver expert security insights for clients, collaborating with internal teams and customer counterparts.

Responsibilities include enriching signals, building complex detection rules, onboarding automation, and reducing false positives. You will mentor peers and promote reusable content across engagements.

Qualifications

• Expert experience writing detection signatures or algorithms.
• “Expert-level proficiency in analyzing event logs and indicators of compromise.”
• Hands-on with Microsoft Azure, Sentinel, Defender and related tools.
• Deep experience with Sentinel Incidents, Workbooks, Hunting Queries, and Notebooks.

Responsibilities

• Enrich security signals to improve SOC efficiency.
• Design and build automation content for onboarding new products.
• Develop complex detection analytic rules to enhance global detection.
• Mentor team members and promote reusable content across clients.
• Lead integration initiatives to optimize log ingestion and reduce noise.
• Develop detection coverage for high-risk vulnerabilities and exploits.
• Communicate with client IT teams to ensure operational readiness.
• Support incident response processes and reporting.

Skills

Detection content

Threat research

Azure/Sentinel/Defender

Kusto Query Language (KQL)

JSON proficiency

Git/CI/CD

Python scripting

Forensics

EDR/SIEM knowledge

Network/protocols

Education

Bachelor's degree or equivalent

Master's degree preferred

Tools

Azure Sentinel

KQL

Notebooks

Git

CI/CD pipelines

Job description

BlueVoyant is seeking a Senior Security Content Engineer to join the Threat Fusion Cell in a fully remote role. You will develop detection logic, automation, and visualizations to deliver expert security insights for clients, collaborating with internal teams and customer counterparts.

Responsibilities include enriching signals, building complex detection rules, onboarding automation, and reducing false positives. You will mentor peers and promote reusable content across engagements.