Senior Microsoft Sentinel / SIEM Engineer

JR United Kingdom; Exeter; Remote; GBP 65,000 - 85,000; Full time

Job summary

Join a recognized Microsoft Managed Partner as a Senior Microsoft Sentinel / SIEM Engineer and lead the integration of advanced security solutions. This fully remote role offers opportunities to work with cutting-edge technologies, directly contributing to cyber defense initiatives and grows your skills in a high-impact environment. Enjoy a flexible work culture and collaborations with Microsoft product teams while remaining at the forefront of threat detection and security management.

Benefits

Access to Microsoft product teams

Involvement in real-world nation-state attack detection

Flexible working environment

Career growth opportunities

Qualifications

• Experience with Microsoft Sentinel solutions and SIEM integration.
• Understanding of security telemetry across various layers.
• Scripting skills in Python and PowerShell.

Responsibilities

• Optimize log onboarding into Microsoft Sentinel for threat detection.
• Deploy and enhance custom connectors and ingestion pipelines.
• Collaborate with incident response teams during active threats.

Skills

SIEM content development

Cyber threat detection

Incident response

Python

PowerShell

APIs

Tools

Microsoft Sentinel

Azure

AWS

GCP

M365

Job description

Social network you want to login/join with:

Senior Microsoft Sentinel / SIEM Engineer, Exeter

Client: Cloud Decisions

Location: Exeter, United Kingdom

Job Category: Other

-

EU work permit required: Yes

Job Views: 5

Posted: 06.06.2025

Expiry Date: 21.07.2025

Job Description:

Job Title:

Senior Microsoft Sentinel / SIEM Engineer - Up to £85,000 + Benefits + Microsoft

Fully Remote, UK

(*Global Microsoft Managed MISA Partner)

+ complex Sentinel Engineering/Integration

The Opportunity

This is a standout opportunity for a Microsoft Sentinel expert to step into a high-impact, technically advanced role with a global security Microsoft powerhouse.

You'll be joining a Microsoft managed global partner, a prominent MISA member, a team with Security MVPs, and a Microsoft Verified Safe XDR Solution Partner, and a trusted Security Depth Partner.

This gives you unparalleled access to Microsoft’s security product roadmap, security previews, and frontline support.

You'll work at the forefront of cyber defense, directly contributing to investigations involving nation-state threat actors (including IR, CH, and NK based campaigns), while refining your skills across enterprise-scale log ingestion and customized Sentinel integration engineering. This role offers the chance to ingest complex logs from various cloud and data sources and to learn and grow as you go.

The Role

You'll own and optimize enterprise-wide log onboarding into Microsoft Sentinel—deploying standard and custom connectors, Function Apps, and parsers to build tailored SIEM solutions that enable effective threat detection and response.

• Log ingestion at scale across hybrid and multi-cloud environments
• Enhance custom Function Apps and ingestion pipelines
• Parse, normalize, and optimize log telemetry for accuracy and cost efficiency
• Collaborate with IR teams during active threats, tuning rules based on real attack data
• Work closely with Microsoft teams to develop advanced detection capabilities
• Contribute to internal knowledge bases and help define engineering standards

Requirements

• Experience building and integrating complex Microsoft Sentinel solutions at SMC and enterprise levels
• Understanding of security telemetry across identity, endpoint, cloud, and network layers
• Experience in SIEM content development, including KQL, analytics rules, and custom data connectors
• Scripting and engineering skills in Python, PowerShell, APIs, and Function Apps
• Background in cyber threat detection, incident response, or DFIR is a plus
• Ability to work effectively in fast-paced, customer-facing environments

Technical Skills

• PowerShell, Python, REST APIs
• Log ingestion and parsing across platforms (Azure, AWS, GCP, M365, Defender, Entra, Copilot, Carbon Black, Okta, Tier 1 Network vendors)
• Knowledge of MITRE ATT&CK, threat detection frameworks, IOC enrichment
• Self-reliance in troubleshooting and problem-solving
• Sentinel/Log Analytics cost management and data optimization

Benefits

• Access to Microsoft Sentinel product teams and early feature previews
• Involvement in real-world nation-state attack detection
• Opportunities to develop and master Sentinel skills
• Part of a Microsoft Security elite MISA and Depth partner
• Exposure to multi-cloud detection and advanced security automation
• Fully remote, flexible work environment with global collaboration
• Career growth and recognition within a respected security consultancy