Senior Microsoft Sentinel / SIEM Engineer

JR United Kingdom; Nottingham; Remote; GBP 70,000 - 85,000; Full time

Job summary

A global Microsoft security partner is seeking a Senior Microsoft Sentinel / SIEM Engineer in Nottingham. The role involves enhancing cyber defense strategies, optimizing log ingestion processes, and collaborating on detection capabilities. This position offers opportunities for career growth, flexible remote work, and engagement in real-world security challenges.

Benefits

Access to Microsoft Sentinel product teams and early features

Involvement in real-world nation-state attack detection

Opportunities to develop Sentinel expertise

Exposure to multi-cloud detection and security automation

Remote, flexible work culture

Career growth within a global Microsoft security firm

Qualifications

• Experience with Microsoft Sentinel in enterprise environments.
• Understanding of security telemetry across identity, endpoint, cloud, and network.
• Scripting skills in Python, PowerShell, and API integration.

Responsibilities

• Own and optimize enterprise-wide log onboarding into Microsoft Sentinel.
• Deploy connectors, function apps, and parsers for tailored SIEM solutions.
• Manage log ingestion across hybrid and multi-cloud environments.

Skills

Microsoft Sentinel

KQL

Log ingestion

Python

PowerShell

API integration

Tools

Azure

AWS

GCP

M365

Carbon Black

Okta

Job description

Social network you want to login/join with:

Senior Microsoft Sentinel / SIEM Engineer, Nottingham

Client: Cloud Decisions

Location: Nottingham, United Kingdom

Job Category: Other

-

EU work permit required: Yes

Job Views:

3

Posted:

31.05.2025

Expiry Date:

15.07.2025

Job Description:

Job Title: Senior Microsoft Sentinel / SIEM Engineer

Salary: Up to £85,000 + Benefits + Microsoft

Location: Fully Remote, UK

About the Role:

This is a standout opportunity for a Microsoft Sentinel expert to join a global security Microsoft partner, a MISA member, with Security MVPs, and a verified Safe XDR Solution Partner. You will work at the forefront of cyber defense, contributing to investigations involving nation-state threat actors and refining enterprise-scale log ingestion and Sentinel integration engineering.

Responsibilities:

• Own and optimize enterprise-wide log onboarding into Microsoft Sentinel
• Deploy connectors, Function Apps, and parsers for tailored SIEM solutions
• Manage log ingestion across hybrid and multi-cloud environments
• Enhance custom Function Apps and ingestion pipelines
• Parse and normalize log telemetry for accuracy and cost efficiency
• Collaborate with IR teams on real attacks
• Partner with Microsoft teams to develop detection capabilities
• Contribute to internal knowledge base and standards

Requirements:

• Experience with Microsoft Sentinel in enterprise environments
• Understanding of security telemetry across identity, endpoint, cloud, and network
• Skills in SIEM content development, KQL, analytics rules, and data connectors
• Scripting skills in Python, PowerShell, and API integration
• Background in threat detection, incident response, or DFIR is a plus
• Ability to work in fast-paced, customer-facing environments

Technical Skills:

• PowerShell, Python, REST APIs
• Log ingestion and parsing across Azure, AWS, GCP, M365, Defender, Entra, Copilot, Carbon Black, Okta, and network vendors
• Knowledge of MITRE ATT&CK, threat frameworks, IOC enrichment
• Problem-solving skills
• Sentinel/Log Analytics Cost Management and Data Optimization

Benefits:

• Access to Microsoft Sentinel product teams and early features
• Involvement in real-world nation-state attack detection
• Opportunities to develop Sentinel expertise
• Part of a Microsoft Security elite MISA and Depth partner
• Exposure to multi-cloud detection and security automation
• Remote, flexible work culture
• Career growth within a global Microsoft security firm