Senior Detection Engineer - Microsoft Sentinel & SIEM/XDR

Fazer Recruitment Ltd; Greater London; Remote; GBP 68,000 - 92,000; Full time

Benefits offered by this job

Performance-based bonus

Remote work

Job summary

Fazer Recruitment Ltd is recruiting a Senior Security Engineering Consultant (Detection Engineering) to lead detection and automation for client environments. The role is remote up to 80% and involves hands-on work with SIEM, XDR and SOAR technologies.

You will design detection strategies, own a detection-as-code approach, and engage directly with customers to mature their SOC capabilities. A performance-based bonus complements a base salary of up to £80,000.

Qualifications

• Experience in SIEM engineering, preferably with Microsoft Sentinel.
• Strong KQL detection writing abilities.
• SOAR automation experience (Logic Apps, Cortex XSOAR or similar).
• Scripting in Python or PowerShell, incl. API integration.
• XDR/EDR familiarity (Defender, CrowdStrike, Cortex).
• Azure security telemetry knowledge.
• Consultancy or customer-facing background with strong communication.

Responsibilities

• Build and tune detection rulesets in KQL across SIEM and XDR platforms.
• Design use cases aligned to MITRE ATT&CK and assess coverage against log sources.
• Develop SOAR automations, integrations and incident playbooks.
• Deliver detection-as-code pipelines with versioning.
• Lead customer workshops on detection strategy and SOC maturity.
• Produce detection strategies, use case catalogs and coverage assessments.

Skills

KQL

Detection engineering

SOAR automation

Python/PowerShell

API integration

Azure security telemetry

Consultancy/customer-facing

Tools

Microsoft Sentinel

Logic Apps

Cortex XSOAR

Job description

Fazer Recruitment Ltd is recruiting a Senior Security Engineering Consultant (Detection Engineering) to lead detection and automation for client environments. The role is remote up to 80% and involves hands-on work with SIEM, XDR and SOAR technologies.

You will design detection strategies, own a detection-as-code approach, and engage directly with customers to mature their SOC capabilities. A performance-based bonus complements a base salary of up to £80,000.