Senior Microsoft Sentinel / SIEM Engineer

JR United Kingdom; Stevenage; Remote; GBP 70,000 - 85,000; Full time

Job summary

A prominent security consultancy is offering a high-impact role for a Senior Microsoft Sentinel / SIEM Engineer. You will be responsible for complex Sentinel solutions, contributing to national security efforts, and collaborating with Microsoft to enhance security features. With a fully remote position and a flexible work environment, the role promises growth and recognition in cybersecurity.

Benefits

Access to Microsoft Sentinel product teams

Fully remote, flexible work culture

Career growth and development

Involvement in nation-state attack detection

Qualifications

• Experience with Microsoft Sentinel integration at SMC and enterprise levels.
• Understanding of security telemetry across multiple layers.
• Scripting skills in Python, PowerShell, APIs.

Responsibilities

• Optimize enterprise-wide log onboarding into Microsoft Sentinel.
• Build tailored SIEM solutions enhancing threat detection.
• Collaborate with Microsoft teams for advanced detection.

Skills

PowerShell

Python

REST APIs

Log ingestion

Problem-solving

Tools

Microsoft Sentinel

Azure

AWS

GCP

M365

Job description

Social network you want to login/join with:

Senior Microsoft Sentinel / SIEM Engineer, Stevenage

Client: Cloud Decisions

Location: Stevenage, UK

Job Category: Other

EU work permit required: Yes

Job Views: 6

Posted: 06.06.2025

Expiry Date: 21.07.2025

Job Description:

Job Title: Senior Microsoft Sentinel / SIEM Engineer

Salary: Up to £85,000 + Benefits + Microsoft

Location: Fully Remote, UK

Company: Global Microsoft Managed MISA Partner

Role Highlights: Complex Sentinel Engineering/Integration

The Opportunity

This is a standout opportunity for a Microsoft Sentinel expert to step into a high-impact, technically advanced role with a global security Microsoft powerhouse.

You'll be joining a Microsoft managed global partner, a prominent MISA member, a team with Security MVPs, a Microsoft Verified Safe XDR Solution Partner, and a trusted Security Depth Partner.

This role provides unparalleled access to Microsoft’s security product roadmap, security previews, and frontline support.

You will work at the forefront of cyber defense, contributing to investigations involving nation-state threat actors (including IR, CH, and NK based campaigns), while refining your skills across enterprise-scale log ingestion and customized Sentinel integration engineering.

The Role

• Own and optimize enterprise-wide log onboarding into Microsoft Sentinel, deploying standard and custom connectors, Function Apps, and parsers.
• Build tailored SIEM solutions that enhance threat detection and response.
• Handle log ingestion at scale across hybrid and multi-cloud environments.
• Enhance custom Function Apps and ingestion pipelines.
• Parse, normalize, and optimize log telemetry for precision and cost efficiency.
• Partner with IR teams on real attacks, tuning rules against live threat actor activity.
• Collaborate with Microsoft teams to develop advanced detection capabilities.
• Contribute to internal knowledge bases and engineering standards.

Requirements

• Experience building and integrating complex Microsoft Sentinel solutions at SMC and enterprise levels.
• Understanding of security telemetry across identity, endpoint, cloud, and network layers.
• Experience with SIEM content development, including KQL, analytics rules, and custom data connectors.
• Scripting and engineering skills in Python, PowerShell, APIs, and Function Apps.
• Background in cyber threat detection, incident response, or DFIR is a plus.
• Ability to work in fast-paced, customer-facing environments.

Technical Skills

• PowerShell, Python, REST APIs
• Log ingestion and parsing across multiple platforms (Azure, AWS, GCP, M365, Defender, Entra, Copilot, Carbon Black, Okta, Tier 1 Network vendors)
• MITRE ATT&CK, threat detection frameworks, IOC enrichment
• Problem-solving skills
• Sentinel/Log Analytics Cost Management and Data Optimization

What’s In It for You?

• Access to Microsoft Sentinel product teams and early feature previews.
• Involvement in real-world nation-state attack detection.
• Opportunity to enhance your Sentinel expertise.
• Part of a Microsoft Security elite MISA and Depth partner.
• Exposure to multi-cloud detection and advanced security automation.
• Fully remote, flexible work culture with global team collaboration.
• Recognition, career growth, and development within a respected security consultancy.