SIEM Automation Engineer

Context Recruitment; United Kingdom; Remote; GBP 50,000 - 60,000; Full time

Job summary

Join a leading Microsoft MSSP as a SIEM Automation Engineer, where you will enhance security operations through automation and optimization. Collaborate with a talented SOC team to develop workflows, respond to incidents, and contribute to proactive defense strategies. This remote position offers a competitive salary package up to £65,000.

Qualifications

• Proven experience with Microsoft Sentinel and Defender for Endpoint.
• Strong proficiency in KQL for threat hunting.
• Knowledge of SIEM automation and playbooks.

Responsibilities

• Design and implement automation workflows within Microsoft Sentinel.
• Monitor and respond to security incidents and alerts.
• Conduct in-depth threat hunting and forensic investigations.

Skills

KQL

Cybersecurity operations

Threat detection

Incident response

Security automation

Job description

1 day ago Be among the first 25 applicants

Get AI-powered advice on this job and more exclusive features.

This range is provided by Context Recruitment. Your actual pay will be based on your skills and experience — talk with your recruiter to learn more.

Base pay range

SIEM Automation Engineer – Leading Microsoft MSSP

An opportunity to work with one of the top 1% Microsoft MSSPs globally, where cutting-edge security solutions meet expert cyber defense. With a 16-person SOC team, this role offers the chance to automate, optimize, and strengthen security operations at scale.

A key position within a world-class MSSP, leveraging Microsoft Sentinel, Defender for Endpoint, and KQL to enhance threat detection, response, and security automation. Responsibilities include developing automated security workflows, streamlining investigations, and advancing proactive defense strategies.

Key Responsibilities:

• Design and implement automation workflows within Microsoft Sentinel for enhanced security operations.
• Monitor and respond to security incidents and alerts, ensuring the protection of our clients’ data and infrastructure.
• Conduct in-depth threat hunting and forensic investigations using KQL.
• Optimize security processes with Defender for Endpoint to detect, contain, and remediate threats.
• Collaborate with security analysts, engineers, and SOC teams to develop automated responses to cyber threats.
• Continuously improve security monitoring strategies and contribute to the overall SIEM architecture.

Experience required:

• Proven experience working with Microsoft Sentinel and Defender for Endpoint.
• Strong proficiency in KQL for deep threat hunting and security analytics.
• Knowledge of SIEM automation, playbooks, and integrations.
• Experience in cybersecurity operations, threat detection, and incident response.
• Passion for security automation and proactive cyber defense strategies.

Paying up to 60k + on-call (65k total package)

Remote based

Must be eligible for SC clearance.

Seniority level

• Seniority level

  Mid-Senior level

Employment type

• Employment type

  Full-time

Job function

• Job function

  Information Technology

• Industries

  IT Services and IT Consulting

Referrals increase your chances of interviewing at Context Recruitment by 2x

Sign in to set job alerts for “Automation Engineer” roles.

London, England, United Kingdom 4 days ago

Senior Software Development Engineer in Test (SDET)

Junior QA Automation Engineer (C#) (Remote - Anywhere)

London, England, United Kingdom 3 weeks ago

Freelance Electrical Engineer - AI Tutor (Talent pool)

London, England, United Kingdom 1 week ago

Test Automation Engineer, Laka Bristol (UK)

Bristol, England, United Kingdom 1 week ago

Freelance Electrical Engineer - AI Tutor (Talent pool)

Software Engineer in Test (SDET) Mobile Testing

London, England, United Kingdom 3 weeks ago

London, England, United Kingdom 3 days ago

Lichfield, England, United Kingdom 1 month ago

London, England, United Kingdom 3 weeks ago

GTM AI Automations Engineer (Remote - Europe)

Software Engineer- Tooling and Integration

We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.