Senior Microsoft Sentinel / SIEM Engineer

JR United Kingdom; Leeds; Remote; GBP 85,000; Full time

Job summary

A leading company is seeking a Senior Microsoft Sentinel / SIEM Engineer to join a fully remote team. This high-impact role involves optimizing log ingestion and enhancing detection capabilities across hybrid and multi-cloud environments. Candidates will have the opportunity to work on nation-state threat detection and advance their skills within a globally recognized Microsoft Security partner.

Benefits

Access to Microsoft Sentinel product teams

Fully remote work environment

Career growth opportunities

Qualifications

• Experience with Microsoft Sentinel solutions at SMC and enterprise levels.
• Understanding of security telemetry across identity, endpoint, cloud and network layers.
• Scripting skills in Python and PowerShell.

Responsibilities

• Optimize log onboarding into Microsoft Sentinel and manage log ingestion.
• Enhance custom Function Apps and ingestion pipelines for SIEM solutions.
• Collaborate with IR teams to tune detection rules.

Skills

Python

PowerShell

Problem-solving

Tools

Microsoft Sentinel

KQL

REST APIs

Job description

Social network you want to login/join with:

Senior Microsoft Sentinel / SIEM Engineer, Leeds, West Yorkshire

Client: Cloud Decisions

Location: Leeds, West Yorkshire, United Kingdom

Job Category: Other

EU work permit required: Yes

Job Views: 3

Posted: 31.05.2025

Expiry Date: 15.07.2025

Job Description:

Job Title:

Senior Microsoft Sentinel / SIEM Engineer - Up to £85,000 + Benefits + Microsoft

Location: Fully Remote, UK

Company: Global Microsoft Managed MISA Partner, Security MVPs, Microsoft Verified Safe XDR Solution Partner

The Opportunity

This is a standout opportunity for a Microsoft Sentinel expert to step into a high-impact, technically advanced role with a global security Microsoft powerhouse.

You will join a Microsoft managed global partner, a prominent MISA member, and a team with Security MVPs, gaining access to Microsoft's security roadmap, previews, and frontline support.

Work at the forefront of cyber defense, investigating nation-state threat campaigns and refining enterprise-scale log ingestion and Sentinel integration engineering, with opportunities to learn and grow your skills.

The Role

• Own and optimize enterprise-wide log onboarding into Microsoft Sentinel, deploying connectors, Function Apps, and parsers for tailored SIEM solutions.
• Manage log ingestion across hybrid and multi-cloud environments.
• Enhance custom Function Apps and ingestion pipelines.
• Parse, normalize, and optimize log telemetry for accuracy and cost control.
• Collaborate with IR teams during active threats to tune detection rules.
• Work closely with Microsoft teams to develop advanced detection capabilities.
• Contribute to internal knowledge bases and engineering standards.

Requirements

• Experience building and integrating complex Microsoft Sentinel solutions at SMC and enterprise levels.
• Understanding of security telemetry across identity, endpoint, cloud, and network layers.
• Proficiency in SIEM content development, including KQL, analytics rules, and custom connectors.
• Scripting skills: Python, PowerShell, APIs, Function Apps.
• Background in cyber threat detection, incident response, or DFIR is a plus.
• Ability to work in fast-paced, customer-facing environments.

Technical Skills

• PowerShell, Python, REST APIs.
• Log ingestion and parsing across platforms (Azure, AWS, GCP, M365, Defender, Entra, Copilot, Carbon Black, Okta, Tier 1 Network vendors).
• Knowledge of MITRE ATT&CK, threat detection frameworks, IOC enrichment.
• Problem-solving skills are crucial.
• Experience with Sentinel/Log Analytics cost management and data optimization.

Benefits

• Access to Microsoft Sentinel product teams and early feature previews.
• Involvement in real-world nation-state attack detection.
• Opportunities to develop Sentinel expertise.
• Part of a Microsoft Security elite MISA and Depth partner.
• Exposure to multi-cloud detection and security automation.
• Fully remote, flexible work environment with global collaboration.
• Career growth and recognition within a respected security consultancy.