Senior Microsoft Security Engineer: Azure & Sentinel

Leap29; Reading; On-site; GBP 90,000 - 120,000; Full time

Job summary

Leap29 is seeking a Senior Microsoft Security Engineer to design, implement and optimise Microsoft Sentinel and Defender XDR across large Azure environments in Reading, UK. You will develop detection coverage with KQL, tune analytics, and drive security posture improvements.

You will also configure Purview data loss protection, information protection controls and IAM/Conditional Access, while building automation with Logic Apps, Azure Functions, Terraform and PowerShell.

Qualifications

• Extensive experience designing and implementing Microsoft security platforms.
• Strong knowledge of Sentinel, Defender XDR and Purview configurations.
• Hands-on security engineering across Azure environments.

Responsibilities

• Design, implement and optimise Microsoft Sentinel environments with onboarding and tuning.
• Develop and tune Sentinel analytics rules using KQL to improve detection and reduce false positives.
• Support threat detection, incident investigation and security monitoring at scale.
• Configure Defender XDR across endpoints, identities, cloud and email.
• Implement Purview solutions including DLP policies and sensitivity labels.
• Perform security assessments and propose improvements across Azure security.
• Collaborate on IAM, Entra ID and Conditional Access controls.
• Build security automation using Logic Apps, Azure Functions, Terraform, Bicep and PowerShell.
• Improve security operations through process automation and engineering best practices.

Skills

Microsoft Sentinel

KQL

Sentinel analytics

Azure security

Defender XDR

Entra ID / IAM

Conditional Access

Automation / IaC

Terraform

Bicep

PowerShell

Logic Apps

Azure Functions

Security architecture

Cloud security

Tools

Terraform

Bicep

Azure DevOps

PowerShell

Logic Apps

Azure Functions

Job description

Leap29 is seeking a Senior Microsoft Security Engineer to design, implement and optimise Microsoft Sentinel and Defender XDR across large Azure environments in Reading, UK. You will develop detection coverage with KQL, tune analytics, and drive security posture improvements.

You will also configure Purview data loss protection, information protection controls and IAM/Conditional Access, while building automation with Logic Apps, Azure Functions, Terraform and PowerShell.