Senior Microsoft Sentinel / SIEM Engineer

JR United Kingdom; Crawley; Remote; GBP 70,000 - 85,000; Full time

Job summary

A leading tech consultancy seeks a Senior Microsoft Sentinel / SIEM Engineer to join their remote team. This role offers an exciting opportunity to work on complex log ingestion and threat detection projects for a global security powerhouse, contributing to investigations involving advanced cyber threats and enhancing security capabilities.

Benefits

Access to Microsoft Sentinel product teams and early feature previews

Remote, flexible work environment with global collaboration

Career growth within a respected security consultancy

Qualifications

• Experience with complex Microsoft Sentinel deployment at SMC and enterprise levels.
• Background in cyber threat detection, incident response, or DFIR is a plus.
• Ability to work in fast-paced, customer-facing environments.

Responsibilities

• Own and optimize enterprise-wide log onboarding into Microsoft Sentinel.
• Deploy standard and custom connectors, Function Apps, and parsers.
• Build tailored SIEM solutions for threat detection and response.

Skills

SIEM Content Development

Security Telemetry Understanding

Log Ingestion and Parsing

Problem-Solving Skills

Tools

PowerShell

Python

REST APIs

Job description

Social network you want to login/join with:

Senior Microsoft Sentinel / SIEM Engineer, Crawley, West Sussex

Client:

Cloud Decisions

Location:

Crawley, West Sussex, United Kingdom

Job Category:

Other

EU work permit required:

Yes

Job Views:

6

Posted:

06.06.2025

Expiry Date:

21.07.2025

Job Description:

Job Title:

Senior Microsoft Sentinel / SIEM Engineer - Up to £85,000 + Benefits + Microsoft

Location: Fully Remote, UK

Company: Global Microsoft Managed MISA Partner

Specialization: Complex Sentinel Engineering/Integration

The Opportunity

This is a standout opportunity for a Microsoft Sentinel expert to step into a high-impact, technically advanced role with a global security Microsoft powerhouse.

You will join a Microsoft managed global partner, a prominent MISA member, a team with Security MVPs, a Microsoft Verified Safe XDR Solution Partner, and a trusted Security Depth Partner. This role offers unparalleled access to Microsoft’s security product roadmap, previews, and frontline support.

Work at the forefront of cyber defense, contributing to investigations involving nation-state threat actors (including IR, CH, and NK campaigns). You will refine your skills in enterprise-scale log ingestion and Sentinel integration engineering, handling complex logs from numerous cloud and data sources.

The Role

• Own and optimize enterprise-wide log onboarding into Microsoft Sentinel
• Deploy standard and custom connectors, Function Apps, and parsers
• Build tailored SIEM solutions for threat detection and response
• Manage log ingestion across hybrid and multi-cloud environments
• Enhance and develop custom Function Apps and ingestion pipelines
• Parse, normalize, and optimize log telemetry for precision and cost efficiency
• Collaborate with IR teams on active threats
• Work closely with Microsoft teams to develop detection capabilities
• Contribute to knowledge bases and engineering standards

Requirements

• Experience with complex Microsoft Sentinel deployment at SMC and enterprise levels
• Understanding of security telemetry across identity, endpoint, cloud, and network layers
• Skills in SIEM content development, including KQL, analytics rules, and data connectors
• Scripting and engineering skills: Python, PowerShell, APIs, Function Apps
• Background in cyber threat detection, incident response, or DFIR (a plus)
• Ability to work in fast-paced, customer-facing environments

Technical Skills

• PowerShell, Python, REST APIs
• Log ingestion and parsing across platforms (Azure, AWS, GCP, M365, Defender, Entra, Copilot, Carbon Black, Okta, Tier 1 Network vendors)
• MITRE ATT&CK, threat detection frameworks, IOC enrichment
• Problem-solving skills
• Sentinel/Log Analytics Cost Management and Data Optimization

Benefits

• Access to Microsoft Sentinel product teams and early feature previews
• Involvement in real-world nation-state attack detection
• Opportunity to develop Sentinel expertise
• Part of a Microsoft Security elite MISA and Depth partner
• Exposure to multi-cloud detection and security automation
• Remote, flexible work environment with global team collaboration
• Career growth within a respected security consultancy