SC Cleared Sentinel Detection Lead - Remote SOC Enablement

Matchtech; Greater London; Remote; GBP 100,000 - 150,000; Full time

Job summary

Matchtech Group is seeking a hands-on Tenant Rationalisation, SOC Assessment & Detection Lead to drive Microsoft security recommendations across a complex enterprise. The role demands deep expertise in Microsoft Sentinel, detection engineering, and SOC transformation, translating assessments into remediation plans and leading delivery while remaining hands-on.

The candidate will design detections, tune KQL queries, and coordinate across technical teams.

Qualifications

• Hands-on experience in designing and deploying Sentinel detections.
• Strong detection engineering and analytics skills.
• Experience leading SOC transformation initiatives.

Responsibilities

• Lead delivery of tenant rationalisation and security remediation activities.
• Design, build and optimise Microsoft Sentinel detections and analytics rules.
• Develop and tune KQL queries to improve threat detection coverage.
• Translate SOC assessment findings into a backlog.
• Coordinate implementation across technical teams.
• Validate security improvements and acceptance criteria.
• Support testing, stakeholder engagement and governance.

Skills

Microsoft Sentinel

KQL development

Analytics rules

SOC delivery

Azure security

Multi-tenant environments

Job description

Matchtech Group is seeking a hands-on Tenant Rationalisation, SOC Assessment & Detection Lead to drive Microsoft security recommendations across a complex enterprise. The role demands deep expertise in Microsoft Sentinel, detection engineering, and SOC transformation, translating assessments into remediation plans and leading delivery while remaining hands-on.

The candidate will design detections, tune KQL queries, and coordinate across technical teams.