SIEM Detection Architect - Microsoft Sentinel

RiverSafe; Remote; GBP 50,000 - 70,000; Full time

Job summary

A leading cybersecurity firm in the UK is seeking a hands-on technical expert to enhance their Microsoft Sentinel and Azure SIEM threat detection capabilities. Responsibilities include designing advanced detection rules, translating threat intelligence into actionable logic, and leading SIEM enhancements. Ideal candidates will have proven experience in SIEM content development and deep knowledge of security principles. This role offers an opportunity to mentor junior engineers and collaborate with IR teams in a dynamic environment.

Qualifications

• Proven experience in SIEM content development and threat detection.
• Strong expertise with Microsoft Sentinel, Azure, and Logic Apps.
• Deep knowledge of MITRE ATT&CK and security principles.

Responsibilities

• Design, implement, and tune advanced detection rules.
• Translate threat intelligence into actionable detection logic.
• Lead SIEM enhancements and content migration.
• Mentor junior engineers and drive best practices.
• Collaborate with IR and threat intel teams.

Skills

SIEM content development

Microsoft Sentinel

Azure

Logic Apps

Analytical skills

Problem-solving skills

Job description

A leading cybersecurity firm in the UK is seeking a hands-on technical expert to enhance their Microsoft Sentinel and Azure SIEM threat detection capabilities. Responsibilities include designing advanced detection rules, translating threat intelligence into actionable logic, and leading SIEM enhancements. Ideal candidates will have proven experience in SIEM content development and deep knowledge of security principles. This role offers an opportunity to mentor junior engineers and collaborate with IR teams in a dynamic environment.