Senior Microsoft Sentinel / SIEM Engineer

JR United Kingdom; Stockport; Remote; GBP 85,000; Full time

Job summary

A leading global Microsoft Managed partner seeks a Senior Microsoft Sentinel / SIEM Engineer in Stockport. This role involves optimizing log ingestion and enhancing security detection capabilities. Candidates will interact with advanced security solutions while collaborating on real-world cyber defense efforts and contribute to innovative security strategies.

Benefits

Direct access to Microsoft Sentinel product teams

Flexible remote work culture

Career growth within a respected consultancy

Qualifications

• Experience building integrated Microsoft Sentinel solutions.
• Understanding of security across identity and network layers.
• Experience in SIEM content development.

Responsibilities

• Own and optimize log onboarding into Microsoft Sentinel.
• Enhance ingestion pipelines and custom connectors.
• Collaborate with Microsoft teams on detection capabilities.

Skills

Log ingestion

Security telemetry

Python

PowerShell

Problem-solving

Tools

Microsoft Sentinel

Azure

AWS

GCP

Job description

Social network you want to login/join with:

Senior Microsoft Sentinel / SIEM Engineer, Stockport

Client: Cloud Decisions

Location: Stockport, United Kingdom

Job Category: Other

EU work permit required: Yes

Job Views: 6

Posted: 06.06.2025

Expiry Date: 21.07.2025

Job Description:

Job Title: Senior Microsoft Sentinel / SIEM Engineer

Salary: Up to £85,000 + Benefits + Microsoft

Work Location: Fully Remote, UK

Company: Global Microsoft Managed MISA Partner

This is a standout opportunity for a Microsoft Sentinel expert to step into a high-impact, technically advanced role with a global security Microsoft powerhouse.

You'll be joining a Microsoft managed global partner, a prominent MISA member, a team with Security MVPs, and a Microsoft Verified Safe XDR Solution Partner, and a trusted Security Depth Partner.

In short, you'll have unparalleled access to Microsoft’s security product roadmap, security previews, and frontline support.

You'll work at the forefront of cyber defense, directly contributing to investigations involving nation-state threat actors (including IR, CH, and NK based campaigns) while refining your skills across enterprise-scale log ingestion and customized Sentinel integration engineering, allowing you to ingest complex logs from various cloud and data sources.

The Role

You will own and optimize enterprise-wide log onboarding into Microsoft Sentinel—deploying standard and custom connectors, Function Apps, and parsers to build tailored SIEM solutions that enhance threat detection and response.

• Log ingestion at scale across hybrid and multi-cloud environments
• Enhance custom Function Apps and ingestion pipelines
• Parse, normalize, and optimize log telemetry for precision and cost efficiency
• Partner with IR teams during real attacks, tuning rules against active threat campaigns
• Collaborate with Microsoft teams to develop advanced detection capabilities
• Contribute to internal knowledge bases and help shape engineering standards

Requirements

• Experience building and integrating complex Microsoft Sentinel solutions at SMC and enterprise levels
• Understanding of security telemetry across identity, endpoint, cloud, and network layers
• Experience in SIEM content development, including KQL, analytics rules, and custom data connectors
• Scripting and engineering skills: Python, PowerShell, APIs, Function Apps
• Background in cyber threat detection, incident response, or DFIR is a plus
• Ability to work effectively in fast-paced, customer-facing environments

Technical Skills

• PowerShell, Python, REST APIs
• Log ingestion and parsing across multiple platforms (Azure, AWS, GCP, M365, Defender, Entra, Copilot, Carbon Black, Okta, Tier 1 Network vendors)
• Knowledge of MITRE ATT&CK, threat detection frameworks, IOC enrichment
• Problem-solving skills and resourcefulness
• Sentinel/Log Analytics Cost Management and Data Optimization

Benefits

• Direct access to Microsoft Sentinel product teams and early feature previews
• Involvement in real-world nation-state attack detection
• Opportunity to develop Sentinel expertise
• Part of a Microsoft Security elite MISA and Depth partner
• Exposure to multi-cloud detection and advanced security automation
• Flexible remote work culture with global collaboration
• Career growth within a respected security consultancy