Security Engineer - Sentinel & Defender XDR (Remote)

Tria; Cardiff; Hybrid; GBP 45,000 - 55,000; Full time

Benefits offered by this job

Remote work flexibility

Job summary

Tria is seeking a Security Engineer to work on Microsoft Sentinel and Defender XDR in Cardiff with remote flexibility (3/4 days onsite per month). This permanent role focuses on engineering, incident response escalations, and strengthening client environments.

You will build detection rules, configure Defender XDR and Office 365 security controls, and develop automation using Azure Logic Apps. Strong communication and independent ownership are essential for progression.

Qualifications

• Strong hands-on experience with Defender XDR and Sentinel.
• Proficient in KQL and Advanced Hunting.
• Experience building or improving security solutions.
• Familiar with DevOps and CI/CD.
• Able to communicate with clients and explain findings.
• Able to work independently and own tasks.
• Eligible for transferable security clearance; sponsor available.

Responsibilities

• Build, deploy and tune Sentinel detection rules using KQL.
• Configure and optimise Defender XDR and wider Microsoft 365 security controls.
• Develop automation and response playbooks using Azure Logic Apps.
• Run vulnerability scans and phishing simulations, translating findings into practical recommendations.
• Contribute to development and deployment processes using DevOps and CI/CD.
• Share knowledge with colleagues and participate in an on-call rota.

Skills

Defender XDR

Sentinel

KQL

Advanced Hunting

Security Solutions

DevOps

CI/CD

Client communication

Ownership

Tools

Azure Logic Apps

Job description

Tria is seeking a Security Engineer to work on Microsoft Sentinel and Defender XDR in Cardiff with remote flexibility (3/4 days onsite per month). This permanent role focuses on engineering, incident response escalations, and strengthening client environments.

You will build detection rules, configure Defender XDR and Office 365 security controls, and develop automation using Azure Logic Apps. Strong communication and independent ownership are essential for progression.