Security Detection Engineering Lead (SIEM & Sentinel)

Manchester Digital; Manchester; Hybride; GBP 90 000 - 120 000; Plein temps

Avantages offerts par ce poste

27 days holiday

Pension with employer contribution

Discretionary bonus

Share schemes

Private healthcare

Dental plan

Healthcare Cash Plan

Enhanced family leave

Travel and bike loan

Employee Assistance Programme

Résumé du poste

AJ Bell invites applications for a Lead role in Security Monitoring & Detection Engineering to own monitoring, detection and incident response. You will shape the technical direction, drive complex investigations, and coordinate with MSSP to reduce risk.

The role requires hands‑on expertise with Microsoft Sentinel, KQL, and cloud telemetry across Azure and AWS, plus strong automation and leadership in a hybrid work model based in the UK.

Qualifications

• Extensive experience in security monitoring, SIEM engineering and incident response.
• Proven ability to design, build and evolve Microsoft Sentinel as a production capability.
• Experience translating threat intel and adversary behavior into detections and responses.

Responsabilités

• Own the technical direction and delivery for Security Monitoring & Detection Engineering, mapping priorities to a monitoring and response roadmap.
• Lead architecture and development of the SIEM, ensuring resilience, scalability and cost-effectiveness.
• Define onboarding of telemetry across on‑prem, Azure, AWS and third‑party services.
• Own the detection engineering lifecycle from requirements to retirement with proper version control.
• Lead development of analytics rules, hunting queries, workbooks and automated playbooks.
• Ensure operational effectiveness of security solutions and measurable outcomes.
• Drive threat-informed defense with Threat Intelligence and Exposure Management.
• Maintain KPI/MI reports and drive corrective actions for improvements.
• Act as senior escalation point during significant security events and incidents.
• Lead incident response within CIRT coordinating internal and MSSP teams.

Connaissances

Security monitoring

SIEM engineering

Detection engineering

Incident response

Microsoft Sentinel

KQL

Azure

AWS

Defender XDR

Automation

Outils

Azure Logic Apps

PowerShell

Python

MSSP

Description du poste

AJ Bell invites applications for a Lead role in Security Monitoring & Detection Engineering to own monitoring, detection and incident response. You will shape the technical direction, drive complex investigations, and coordinate with MSSP to reduce risk.

The role requires hands‑on expertise with Microsoft Sentinel, KQL, and cloud telemetry across Azure and AWS, plus strong automation and leadership in a hybrid work model based in the UK.