Senior Microsoft Sentinel / SIEM Engineer

JR United Kingdom; Coventry; Remote; GBP 70,000 - 85,000; Full time

Job summary

A prominent Microsoft Sentinel expert role at a leading cloud consultancy offers unmatched access to Microsoft's security roadmap. This fully remote opportunity emphasizes substantial contributions to cyber defense against nation-state threats, along with collaboration with top-tier security experts and innovative technologies in a flexible work environment.

Benefits

Access to Microsoft Sentinel product teams

Opportunities to enhance Sentinel expertise

Flexible work culture

Career growth opportunities

Global collaboration

Qualifications

• Experience with log ingestion and parsing across hybrid and multi-cloud environments.
• Ability to work in fast-paced, customer-facing environments.

Responsibilities

• Own and optimize enterprise-wide log onboarding into Microsoft Sentinel.
• Collaborate with Microsoft teams to develop advanced detection capabilities.
• Enhance custom Function Apps and ingestion pipelines.

Skills

Building and integrating complex Microsoft Sentinel solutions

Security telemetry understanding

SIEM content development

Scripting and engineering skills

Cyber threat detection background

Problem-solving skills

Tools

PowerShell

Python

REST APIs

Job description

Social network you want to login/join with:

Senior Microsoft Sentinel / SIEM Engineer, Coventry

Client: Cloud Decisions

Location: Coventry, United Kingdom

Job Category: Other

EU work permit required: Yes

Job Views:

3

Posted:

31.05.2025

Expiry Date:

15.07.2025

Job Description:

Job Title: Senior Microsoft Sentinel / SIEM Engineer

Salary: Up to £85,000 + Benefits + Microsoft

Location: Fully Remote, UK

Company: Global Microsoft Managed MISA Partner

Specialization: Complex Sentinel Engineering/Integration

The Opportunity

This is a standout opportunity for a Microsoft Sentinel expert to step into a high-impact, technically advanced role with a global security Microsoft powerhouse.

You'll be joining a Microsoft managed global partner, a prominent MISA member, a team with Security MVPs, and a Microsoft Verified Safe XDR Solution Partner, and a trusted Security Depth Partner.

This role offers unparalleled access to Microsoft’s security product roadmap, security previews, and frontline support.

Work at the forefront of cyber defence, directly contributing to investigations involving nation-state threat actors (including IR, CH, and NK based campaigns), while refining your skills across enterprise-scale log ingestion and customized Sentinel integration engineering.

The Role

Own and optimize enterprise-wide log onboarding into Microsoft Sentinel by deploying standard and custom connectors, Function Apps, and parsers to build tailored SIEM solutions that enhance threat detection and response.

• Log ingestion at scale across hybrid and multi-cloud environments
• Enhance custom Function Apps and ingestion pipelines
• Parse, normalize, and optimize log telemetry for precision and cost control
• Partner with IR teams during real attacks to tune rules against live threat activity
• Collaborate with Microsoft teams to develop advanced detection capabilities
• Contribute to internal knowledge base and engineering standards

Required Skills

• Experience building and integrating complex Microsoft Sentinel solutions at SMC and enterprise levels
• Understanding of security telemetry across identity, endpoint, cloud, and network layers
• Experience with SIEM content development, including KQL, analytics rules, and custom data connectors
• Scripting and engineering skills: Python, PowerShell, APIs, Function Apps
• Background in cyber threat detection, incident response, or DFIR is a plus
• Ability to work in fast-paced, customer-facing environments

Technical Skills

• PowerShell, Python, REST APIs
• Log ingestion and parsing across platforms (Azure, AWS, GCP, M365, Defender, Entra, Copilot, Carbon Black, Okta, Tier 1 Network vendors)
• Knowledge of MITRE ATT&CK, threat detection frameworks, IOC enrichment
• Problem-solving skills are crucial
• Sentinel/Log Analytics Cost Management and Data Optimization

What’s In It for You?

• Access to Microsoft Sentinel product teams and early feature previews
• Involvement in real-world nation-state attack detection
• Opportunities to enhance Sentinel expertise
• Be part of a Microsoft Security elite MISA and Depth partner
• Exposure to multi-cloud detection and security automation
• Fully remote, flexible work culture with global collaboration
• Recognition, career growth within a respected security consultancy