Senior Microsoft Sentinel / SIEM Engineer

JR United Kingdom; Newport; Remote; GBP 70,000 - 85,000; Full time

Job summary

A leading consultancy specializing in cybersecurity is looking for a Senior Microsoft Sentinel / SIEM Engineer. This fully remote role involves optimizing log ingestion and tailoring SIEM solutions while working on projects that directly impact national security. The successful candidate will have access to the latest Microsoft Sentinel technologies, develop expertise in a dynamic environment, and company culture emphasizes recognition and career growth.

Benefits

Direct access to Microsoft Sentinel product teams

Fully remote flexible work culture

Opportunities for career growth and development

Qualifications

• Experience in building and integrating complex Microsoft Sentinel solutions.
• Understanding of security telemetry across identity, endpoint, cloud, and network layers.
• Scripting skills in Python, PowerShell, APIs, and Function Apps.

Responsibilities

• Own and optimize enterprise-wide log onboarding into Microsoft Sentinel.
• Deploy standard and custom connectors, Function Apps, and parsers.
• Collaborate with Microsoft teams to develop advanced detection capabilities.

Skills

PowerShell

Python

REST APIs

Log ingestion

Threat detection

Job description

Social network you want to login/join with:

Senior Microsoft Sentinel / SIEM Engineer, Newport

Client: Cloud Decisions

Location: Newport, United Kingdom

Job Category: Other

EU work permit required: Yes

Job Views: 3

Posted: 31.05.2025

Expiry Date: 15.07.2025

Job Description:

Job Title: Senior Microsoft Sentinel / SIEM Engineer

Salary: To £85,000 + Benefits + Microsoft

Work Arrangement: Fully Remote, UK

Company: Global Microsoft Managed MISA Partner

Specialization: Complex Sentinel Engineering/Integration

The Opportunity

This is a standout opportunity for a Microsoft Sentinel expert to step into a high-impact, technically advanced role with a global security Microsoft powerhouse.

You'll be joining a Microsoft managed global partner, a prominent MISA member, a team with Security MVPs, and a Microsoft Verified Safe XDR Solution Partner, providing you with unparalleled access to Microsoft’s security product roadmap, security previews, and frontline support.

You will work at the forefront of cyber defense, directly contributing to investigations involving nation-state threat actors (including IR, CH, and NK based campaigns), while refining your skills in enterprise-scale log ingestion and customized Sentinel integration engineering.

The Role

• Own and optimize enterprise-wide log onboarding into Microsoft Sentinel
• Deploy standard and custom connectors, Function Apps, and parsers to build tailored SIEM solutions
• Handle log ingestion at scale across hybrid and multi-cloud environments
• Enhance custom Function Apps and ingestion pipelines
• Parse, normalize, and optimize log telemetry for precision and cost control
• Partner with IR teams on real attacks to tune rules against live threat actor activity
• Collaborate with Microsoft teams to develop advanced detection capabilities
• Contribute to internal knowledge base and engineering standards

What’s Needed?

• Experience building and integrating complex Microsoft Sentinel solutions at SMC and enterprise levels
• Understanding of security telemetry across identity, endpoint, cloud, and network layers
• Experience in SIEM content development, including KQL, analytics rules, and custom data connectors
• Scripting and engineering skills in Python, PowerShell, APIs, and Function Apps
• Background in cyber threat detection, incident response, or DFIR is a plus
• Ability to work in fast-paced, customer-facing delivery environments

The Technical Skills:

• PowerShell, Python, REST APIs
• Log ingestion and parsing across platforms (Azure/AWS/GCP, M365, Defender, Entra, Copilot, Carbon Black, Okta, Tier 1 Network vendors)
• Knowledge of MITRE ATT&CK, threat detection frameworks, IOC enrichment
• Resourcefulness in troubleshooting and problem-solving
• Sentinel/Log Analytics Cost Management and Data Optimization

What’s In It for You?

• Direct access to Microsoft Sentinel product teams and early feature previews
• Involvement in real-world nation-state attack detection
• Opportunities to develop and sharpen Sentinel expertise
• Membership in a Microsoft Security elite MISA and Depth partner
• Exposure to multi-cloud detection and advanced security automation
• Fully remote, flexible work culture with global collaboration
• Recognition, career growth, and development within a respected security consultancy