Senior Microsoft Sentinel / SIEM Engineer

JR United Kingdom; Peterborough; Remote; GBP 70,000 - 85,000; Full time

Job summary

A leading company is seeking a Senior Microsoft Sentinel / SIEM Engineer in Peterborough, UK. This role offers an opportunity to work on advanced cyber defense initiatives, managing log ingestion and collaborating with top-tier engineers in the field of security. Candidates are expected to have extensive experience with Microsoft Sentinel and related technologies.

Benefits

Access to Microsoft Sentinel product teams

Involvement in real-world nation-state attack detection

Opportunities to develop Sentinel expertise

Career growth within a respected security consultancy

Qualifications

• Experience with Microsoft Sentinel deployment at enterprise levels.
• Understanding of security telemetry across multiple layers.
• Experience with KQL and analytics rules.

Responsibilities

• Own and optimize log onboarding into Microsoft Sentinel.
• Handle log ingestion at scale across cloud environments.
• Collaborate with teams for detection capabilities development.

Skills

Microsoft Sentinel

SIEM content development

Python

PowerShell

Problem-solving

Tools

Microsoft Sentinel

APIs

Azure

AWS

GCP

M365

Job description

Social network you want to login/join with:

Senior Microsoft Sentinel / SIEM Engineer, Peterborough

Client: Cloud Decisions

Location: Peterborough, United Kingdom

Job Category: Other

EU work permit required: Yes

Job Views:

3

Posted:

31.05.2025

Expiry Date:

15.07.2025

Job Description:

Job Title: Senior Microsoft Sentinel / SIEM Engineer

Salary: To £85,000 + Benefits + Microsoft

Location: Fully Remote, UK

Partnership: Global Microsoft Managed MISA Partner, Security MVPs, Microsoft Verified Safe XDR Solution Partner, Security Depth Partner

This is a standout opportunity for a Microsoft Sentinel expert to join a high-impact, technically advanced role with a global security Microsoft powerhouse. You'll work at the forefront of cyber defense, contributing to investigations involving nation-state threat actors and refining your skills in enterprise-scale log ingestion and Sentinel integration engineering.

The Role

• Own and optimize enterprise-wide log onboarding into Microsoft Sentinel
• Deploy standard and custom connectors, Function Apps, and parsers
• Handle log ingestion at scale across hybrid and multi-cloud environments
• Enhance custom Function Apps and ingestion pipelines
• Parse, normalize, and optimize log telemetry for precision and cost control
• Partner with IR teams on real attacks
• Collaborate with Microsoft teams to develop detection capabilities
• Contribute to internal knowledge base and engineering standards

Requirements

• Experience with complex Microsoft Sentinel deployment at SMC and enterprise levels
• Understanding of security telemetry across identity, endpoint, cloud, and network layers
• Experience in SIEM content development, including KQL, analytics rules, and data connectors
• Scripting skills: Python, PowerShell, APIs, Function Apps
• Background in cyber threat detection, incident response, or DFIR is a plus
• Ability to work in fast-paced, customer-facing environments

Technical Skills

• PowerShell, Python, REST APIs
• Log ingestion and parsing across platforms (Azure, AWS, GCP, M365, Defender, Entra, Copilot, Carbon Black, Okta, Network vendors)
• MITRE ATT&CK, threat detection frameworks, IOC enrichment
• Problem-solving skills
• Sentinel/Log Analytics Cost Management and Data Optimization

Benefits

• Access to Microsoft Sentinel product teams and early feature previews
• Involvement in real-world nation-state attack detection
• Opportunities to develop Sentinel expertise
• Part of a Microsoft Security elite MISA and Depth partner
• Exposure to multi-cloud detection and security automation
• Remote work with flexible culture and global collaboration
• Career growth within a respected security consultancy