Security Engineer: Defender XDR & Sentinel (Remote)

Hamilton Barnes ?; Cardiff; Hybrid; GBP 38,000 - 52,000; Full time

Job summary

Hamilton Barnes is seeking a Security Engineer to join a growing Security Operations function. This hands-on role focuses on the Microsoft Defender XDR and Sentinel stack, delivering incident response and security improvements across client environments.

You will design and optimise security controls, develop detections with KQL, and automate using Azure Logic Apps and Functions. Remote with occasional Cardiff office attendance is supported.

Qualifications

• Extensive Security Engineering or Senior Security Analysis experience.
• Strong KQL and Advanced Hunting knowledge.
• Experience with vulnerability scanning and risk analysis.
• Strong client-facing communication skills to non-technical stakeholders.
• Hands-on exposure to the Microsoft Security ecosystem.

Responsibilities

• Design, implement and optimise security controls.
• Develop detection capabilities using KQL and Advanced Hunting.
• Build and maintain Microsoft Sentinel analytical rules.
• Deploy and manage Content Hub solutions.
• Tune Defender policies and security configurations.
• Lead vulnerability scanning activities and analyze results.
• Produce structured security reports for clients.
• Handle escalated Incident Response investigations.
• Automate processes using Azure Logic Apps and Azure Functions.

Skills

Security engineering

Incident response

KQL / Advanced Hunting

Client-facing communication

Automation scripting

Azure/M365 security

Tools

Microsoft Defender XDR

Microsoft Sentinel

KQL

Azure Logic Apps

Azure Functions

Content Hub

Job description

Hamilton Barnes is seeking a Security Engineer to join a growing Security Operations function. This hands-on role focuses on the Microsoft Defender XDR and Sentinel stack, delivering incident response and security improvements across client environments.

You will design and optimise security controls, develop detections with KQL, and automate using Azure Logic Apps and Functions. Remote with occasional Cardiff office attendance is supported.