SIEM Content & Platform Engineer

Harvey Nash Group; City Of London; Híbrido; GBP 111 000 - 166 000; Tempo integral

Resumo da oferta

Harvey Nash Group seeks a SIEM Content & Platform Engineer for a London-based contract role (Remote/Hybrid). The position focuses on security monitoring, detection engineering, platform optimisation, automation and enhancing enterprise cyber resilience.

The candidate will demonstrate hands-on experience with Microsoft Sentinel and Defender XDR in large enterprises, and will develop and tune analytics rules, threat hunting queries, and detection content aligned to MITRE ATT&CK.

Qualificações

• Strong hands-on experience with Microsoft Sentinel and Defender XDR in large enterprises.
• Experience developing and tuning analytics rules, threat hunting queries, and detection content aligned to security frameworks such as MITRE ATT&CK.
• Proven experience onboarding and optimising cloud, infrastructure, application and security telemetry within a SIEM platform.
• Strong automation skills using Logic Apps, Azure Functions, PowerShell, Python and REST APIs.
• Experience with security engineering, platform hardening, vulnerability remediation, technical risk assessment and operational support.
• Experience with Azure DevOps, CI/CD, Detection-as-Code, and Infrastructure-as-Code.
• Microsoft certifications such as SC-200 or AZ-500.

Responsabilidades

• Act as subject matter expert across SIEM engineering, detection content development and security monitoring architecture.
• Support security monitoring operations and platform optimisation for enterprise environments.

Conhecimentos

Microsoft Sentinel

Microsoft Defender XDR

Logic Apps

Azure Functions

PowerShell

Python

REST APIs

Threat Hunting

MITRE ATT&CK

Automation

Ferramentas

Azure DevOps

CI/CD

Detection-as-Code

Infrastructure-as-Code

Descrição da oferta de emprego

SIEM Content & Platform Engineer - London (Remote/Hybrid) - Outside IR35 Contract

We are supporting an exciting client who is looking for an experienced SIEM Content & Platform Engineer to join their Cyber Security team on a contract basis. This role will focus on security monitoring, detection engineering, platform optimisation, automation, and improving enterprise cyber resilience.

Requirements:

1. Strong hands-on experience with Microsoft Sentinel and Microsoft Defender XDR in large enterprise environments.
2. Experience developing and tuning analytics rules, threat hunting queries, correlation logic and detection content aligned to security frameworks such as MITRE ATT&CK.
3. Proven experience onboarding and optimising cloud, infrastructure, application and security telemetry within a SIEM platform.
4. Strong automation skills using Logic Apps, Azure Functions, PowerShell, Python and REST APIs.
5. Experience with security engineering, platform hardening, vulnerability remediation, technical risk assessment and operational support.

Desirable:

• Experience with Azure DevOps, CI/CD, Detection-as-Code, and Infrastructure-as-Code.
• Microsoft certifications such as SC-200 or AZ-500.

We're looking for a contractor who can act as a subject matter expert across SIEM engineering, detection content development and security monitoring architecture, with a strong background in Microsoft Sentinel, Detection Engineering, Security Automation and Cyber Security Operations.

SIEM Content & Platform Engineer - London (Remote/Hybrid) - Outside IR35 Contract