Senior Microsoft Sentinel / SIEM Engineer

JR United Kingdom; Manchester; Remote; GBP 70,000 - 85,000; Full time

Job summary

A leading consulting firm is seeking a Senior Microsoft Sentinel / SIEM Engineer to lead complex log ingestion and enhance detection capabilities within a fully remote team. You will contribute to critical cyber defense initiatives, working closely with Microsoft product teams and accessing cutting-edge technology in threat detection and response. This role offers an excellent opportunity for career growth within an elite security consultancy, emphasizing a collaborative and flexible working environment.

Benefits

Access to Microsoft Sentinel product teams

Flexible remote work culture

Career growth opportunities

Recognition within Microsoft Security elite

Qualifications

• Experience with Microsoft Sentinel at enterprise level.
• Understanding of security telemetry across multiple environments.
• Scripting skills in Python and PowerShell for integrations.

Responsibilities

• Own and optimize log onboarding into Microsoft Sentinel.
• Collaborate with teams on active threats and detection capabilities.
• Enhance and deploy standard/custom SIEM solutions.

Skills

Log ingestion

Python

PowerShell

Cyber threat detection

Incident response

Tools

Microsoft Sentinel

Azure

AWS

GCP

M365

Job description

Social network you want to login/join with:

Senior Microsoft Sentinel / SIEM Engineer, Manchester

Client: Cloud Decisions

Location: Manchester, United Kingdom

Job Category: Other

EU work permit required: Yes

Job Views: 3

Posted: 31.05.2025

Expiry Date: 15.07.2025

Job Description:

Job Title:

To £85,000 + Benefits + Microsoft

Fully Remote, UK

(*Global Microsoft Managed MISA Partner

+ complex Sentinel Engineering/Integration)

The Opportunity

This is a standout opportunity for a Microsoft Sentinel expert to step into a high-impact, technically advanced role with a global security Microsoft powerhouse.

You'll be joining a Microsoft managed global partner, a prominent MISA member, a team with Security MVPs, and a Microsoft Verified Safe XDR Solution Partner, and a trusted Security Depth Partner.

This role offers unparalleled access to Microsoft’s security product roadmap, previews, and frontline support.

You will work at the forefront of cyber defense, directly contributing to investigations involving nation-state threat actors (including IR, CH, and NK based campaigns), and refining your skills across enterprise-scale log ingestion and Sentinel integration engineering, with opportunities to handle complex logs from diverse cloud and data sources.

The Role

You will own and optimize enterprise-wide log onboarding into Microsoft Sentinel—deploying standard and custom connectors, Function Apps, and parsers to build tailored SIEM solutions that enhance threat detection and response.

• Log ingestion at scale across hybrid and multi-cloud environments
• Enhance custom Function Apps and ingestion pipelines
• Parse, normalize, and optimize log telemetry for precision and cost efficiency
• Collaborate with IR teams on active threats, tuning rules based on live threat actor activity
• Work closely with Microsoft teams to develop advanced detection capabilities
• Contribute to internal knowledge bases and engineering standards

Requirements

• Experience building and integrating complex Microsoft Sentinel at SMC and enterprise levels
• Understanding of security telemetry across identity, endpoint, cloud, and network layers
• Experience with SIEM content development, including KQL, analytics rules, and custom data connectors
• Scripting and engineering skills: Python, PowerShell, APIs, Function Apps
• Background in cyber threat detection, incident response, or DFIR is a plus
• Ability to work effectively in fast-paced, customer-facing environments

Technical Skills:

• PowerShell, Python, REST APIs
• Log ingestion and parsing across platforms (Azure, AWS, GCP, M365, Defender, Entra, Copilot, Carbon Black, Okta, Tier 1 Network vendors)
• MITRE ATT&CK, threat detection frameworks, IOC enrichment
• Problem-solving skills
• Sentinel/Log Analytics cost management and data optimization

What’s In It for You?

• Access to Microsoft Sentinel product teams and early feature previews
• Involvement in real-world nation-state attack detection
• Opportunities to develop Sentinel expertise
• Part of a Microsoft Security elite MISA and Depth partner
• Exposure to multi-cloud detection and security automation
• Flexible, remote work culture with global collaboration
• Recognition and career growth within a respected security consultancy