Security Engineering Consultant (Detection Engineering / Microsoft Sentinel)

Fazer Recruitment Ltd; Greater London; Remote; GBP 68,000 - 92,000; Full time

Benefits offered by this job

Performance-based bonus

Remote work

Job summary

Fazer Recruitment Ltd is recruiting a Senior Security Engineering Consultant (Detection Engineering) to lead detection and automation for client environments. The role is remote up to 80% and involves hands-on work with SIEM, XDR and SOAR technologies.

You will design detection strategies, own a detection-as-code approach, and engage directly with customers to mature their SOC capabilities. A performance-based bonus complements a base salary of up to £80,000.

Qualifications

• Experience in SIEM engineering, preferably with Microsoft Sentinel.
• Strong KQL detection writing abilities.
• SOAR automation experience (Logic Apps, Cortex XSOAR or similar).
• Scripting in Python or PowerShell, incl. API integration.
• XDR/EDR familiarity (Defender, CrowdStrike, Cortex).
• Azure security telemetry knowledge.
• Consultancy or customer-facing background with strong communication.

Responsibilities

• Build and tune detection rulesets in KQL across SIEM and XDR platforms.
• Design use cases aligned to MITRE ATT&CK and assess coverage against log sources.
• Develop SOAR automations, integrations and incident playbooks.
• Deliver detection-as-code pipelines with versioning.
• Lead customer workshops on detection strategy and SOC maturity.
• Produce detection strategies, use case catalogs and coverage assessments.

Skills

KQL

Detection engineering

SOAR automation

Python/PowerShell

API integration

Azure security telemetry

Consultancy/customer-facing

Tools

Microsoft Sentinel

Logic Apps

Cortex XSOAR

Job description

Senior Security Engineering Consultant (Detection Engineering / Microsoft Sentinel)

Remote 80%

£80,000 + performance bonus

About the role

Our client, a well-established cybersecurity services provider, is growing its UK Professional Services team and needs a Senior Security Engineering Consultant to lead detection engineering and automation for its customers.

This is a hands-on, customer-facing role. You'll design and deliver detection and response capabilities across SIEM, XDR and SOAR platforms, working alongside a dedicated SOC engineering team. You'll also own a "detection as code" approach, so detections and automations are built consistently and at scale.

What you'll do

• Build and tune detection rulesets in KQL (or equivalent) across SIEM and XDR platforms
• Design use cases aligned to MITRE ATT&CK and assess coverage against customer log sources
• Develop SOAR automations, integrations and incident response playbooks
• Deliver detection as code pipelines with structured versioning
• Lead customer workshops on detection strategy and SOC maturity
• Produce clear deliverables such as detection strategies, use case catalogues and coverage assessments

What you'll bring

• Strong SIEM engineering experience, ideally Microsoft Sentinel
• Proven KQL detection writing
• SOAR experience (Logic Apps, Cortex XSOAR or similar)
• Python or PowerShell scripting, including API integration
• XDR/EDR experience (Defender, CrowdStrike, Cortex or similar)
• Azure security telemetry knowledge
• Consultancy or customer-facing background, with excellent communication skills

Nice to have:

XSIAM, SentinelOne, NDR tools (Vectra, Corelight), threat intelligence enrichment.

What's on offer

• £70k-£80k plus performance-based bonus
• Hybrid working, Mon-Fri 9:00-5:30, no on-call
• Varied customer work and exposure to real-world threats
• Industry-leading benefits