Senior Microsoft Sentinel / SIEM Engineer

JR United Kingdom; Sheffield; Remote; GBP 85,000; Full time

Job summary

A leading security consultancy is seeking a Senior Microsoft Sentinel / SIEM Engineer to join their team in Sheffield, UK. This position involves optimizing log management in cloud environments and developing detection frameworks, all while collaborating with top security experts at Microsoft. Candidates should have proven experience with Sentinel and scripting skills, setting themselves up for a dynamic and impactful role within a global security landscape.

Benefits

Access to Microsoft Sentinel product teams and early feature previews.

Opportunities to develop Sentinel expertise.

Remote, flexible work culture with global collaboration.

Career growth within a respected Microsoft security consultancy.

Qualifications

• Experience with Microsoft Sentinel deployment at SMC and enterprise levels.
• Understanding of security telemetry across various layers.
• Background in cyber threat detection or incident response is advantageous.

Responsibilities

• Own and optimize enterprise-wide log onboarding into Microsoft Sentinel.
• Manage log ingestion across hybrid and multi-cloud environments.
• Collaborate with Microsoft teams to develop detection capabilities.

Skills

Scripting skills

Problem-solving

Tools

PowerShell

Python

REST APIs

Job description

Social network you want to login/join with:

Senior Microsoft Sentinel / SIEM Engineer, Sheffield, South Yorkshire

Client: Cloud Decisions

Location: Sheffield, South Yorkshire, United Kingdom

Job Category: Other

EU work permit required: Yes

Job Views:

3

Posted:

31.05.2025

Expiry Date:

15.07.2025

Job Description:

Job Title: Senior Microsoft Sentinel / SIEM Engineer

Salary: Up to £85,000 + Benefits + Microsoft

Location: Fully Remote, UK

Company: Global Microsoft Managed MISA Partner

Overview: This is a high-impact, technically advanced role with a global security Microsoft powerhouse. You'll join a Microsoft managed global partner, a prominent MISA member, and work alongside Security MVPs and a Microsoft Verified Safe XDR Solution Partner. This role offers access to Microsoft’s security roadmap, previews, and frontline support.

Responsibilities:

• Own and optimize enterprise-wide log onboarding into Microsoft Sentinel, deploying connectors, Function Apps, and parsers for threat detection and response.
• Manage log ingestion across hybrid and multi-cloud environments.
• Enhance custom Function Apps and ingestion pipelines.
• Parse, normalize, and optimize log telemetry for accuracy and cost-efficiency.
• Partner with IR teams during real attacks, tuning rules based on live threat activity.
• Collaborate with Microsoft teams to develop detection capabilities.
• Contribute to knowledge base and engineering standards.

Requirements:

• Experience with complex Microsoft Sentinel deployment at SMC and enterprise levels.
• Understanding of security telemetry across identity, endpoint, cloud, and network layers.
• Experience in SIEM content development, including KQL, analytics rules, and data connectors.
• Scripting skills in Python, PowerShell, APIs, and Function Apps.
• Background in cyber threat detection, incident response, or DFIR is advantageous.
• Ability to work in fast-paced, customer-facing environments.

Technical Skills:

• PowerShell, Python, REST APIs.
• Log ingestion and parsing across platforms like Azure, AWS, GCP, M365, Defender, Entra, Copilot, Carbon Black, Okta, and network vendors.
• Knowledge of MITRE ATT&CK, threat detection frameworks, IOC enrichment.
• Problem-solving skills are crucial.
• Experience with Sentinel/Log Analytics cost management and data optimization.

Benefits:

• Access to Microsoft Sentinel product teams and early feature previews.
• Involvement in real-world nation-state attack detection.
• Opportunities to develop Sentinel expertise.
• Part of a Microsoft Security elite MISA and Depth partner.
• Exposure to multi-cloud detection and security automation.
• Remote, flexible work culture with global collaboration.
• Career growth within a respected Microsoft security consultancy.