Senior Microsoft Sentinel / SIEM Engineer

JR United Kingdom; Reading; Remote; GBP 70,000 - 85,000; Full time

Job summary

A leading global security consultancy seeks a Senior Microsoft Sentinel Engineer to enhance cyber defense strategies. In this fully remote role, you'll leverage Microsoft Sentinel for threat detection, partner with security teams, and gain unparalleled access to cutting-edge technologies. Join a dynamic environment committed to excellence and growth.

Benefits

Fully remote work

Flexible work culture

Direct access to product teams

Career growth opportunities

Collaborative global team

Qualifications

• Experience integrating Microsoft Sentinel at enterprise levels.
• Understanding security telemetry across various layers.
• Scripting skills in Python, PowerShell, APIs.

Responsibilities

• Own and optimize log onboarding into Microsoft Sentinel.
• Partner with IR teams on live threat detection.
• Enhance ingestion pipelines and optimize log telemetry.

Skills

PowerShell

Python

SIEM content development

Incident response

Data optimization

Tools

Microsoft Sentinel

REST APIs

Azure

AWS

GCP

Job description

Social network you want to login/join with:

Senior Microsoft Sentinel / SIEM Engineer, reading

col-narrow-left

Client:

Cloud Decisions

Location:

reading, United Kingdom

Job Category:

Other

-

EU work permit required:

Yes

col-narrow-right

Job Views:

3

Posted:

31.05.2025

Expiry Date:

15.07.2025

col-wide

Job Description:

Job Title:

To £85,000 + Benefits + Microsoft

Fully Remote, UK

(*Global Microsoft Managed MISA Partner

+ complex Sentinel Engineering/Integration)

The Opportunity

This is a standout opportunity for a Microsoft Sentinel expert to step into a high-impact, technically advanced role with a global security Microsoft powerhouse.

You'll be joining a Microsoft managed global partner, a prominent MISA member, a team with Security MVPs and a Microsoft Verified Safe XDR Solution Partner, and a trusted Security Depth Partner.

In short, giving you unparalleled access to Microsoft’s security product roadmap, security previews, and frontline support.

You'll work at the front line of cyber defense, directly contributing to investigations involving nation-state threat actors (including IR, CH, and NK based campaigns) while refining your craft across enterprise-scale log ingestion and customized Sentinel integration engineering that will stretch your skills, give you the opportunity to ingest complex logs from a multitude of cloud and data sources, and learn as you go.

The Role

You'll own and optimize enterprise-wide log onboarding into Microsoft Sentinel – deploying standard and custom connectors, Function Apps, and parsers to build tailored SIEM solutions that drive real-world threat detection and response.

• Log ingestion at scale across numerous hybrid and multi-cloud environments
• Enhance custom Function Apps and ingestion pipelines
• Parse, normalize, and optimize log telemetry to ensure precision and cost control
• Partner with IR teams on real attacks – tuning rules against live threat actor activity
• Sync closely with Microsoft teams to build cutting-edge detection capabilities
• Contribute to internal knowledge base and help shape engineering standards

What's needed?

• Experience building and integrating complex Microsoft Sentinel at SMC and enterprise levels
• Understanding of security telemetry across identity, endpoint, cloud, and network layers
• Experience in SIEM content development, including KQL, analytics rules, and custom data connectors
• Scripting and engineering skills – Python, PowerShell, APIs, Function Apps
• A background in cyber threat detection, incident response, or DFIR is a plus
• Comfortable working in fast-moving, customer-facing delivery environments

The Technical Skills:

• PowerShell, Python, REST APIs
• Log ingestion and parsing across multiple platforms (Azure/AWS/GCP, M365, Defender, Entra, Copilot, Carbon Black, Okta, Tier 1 Network vendors)
• MITRE ATT&CK, threat detection frameworks, IOC enrichment
• Ability to troubleshoot and figure things out independently
• Sentinel/Log Analytics Cost Management and Data Optimization

What’s In It for You?

• Direct access to Microsoft Sentinel product teams and early feature previews
• Deep involvement in real-world nation-state attack detection
• Opportunity to stretch and sharpen your Sentinel mastery
• Be part of a Microsoft Security elite MISA and Depth partner
• Exposure to multi-cloud detection and advanced security automation
• Fully remote, flexible work culture with global team collaboration
• Recognition, career growth, and development within a respected global Microsoft security consultancy