SIEM Detection Engineer - Remote

RiverSafe; Remote; GBP 50,000 - 70,000; Full time

Job summary

A leading cybersecurity firm in the UK is seeking a hands-on technical expert to enhance their Microsoft Sentinel and Azure SIEM threat detection capabilities. Responsibilities include designing advanced detection rules, translating threat intelligence into actionable logic, and leading SIEM enhancements. Ideal candidates will have proven experience in SIEM content development and deep knowledge of security principles. This role offers an opportunity to mentor junior engineers and collaborate with IR teams in a dynamic environment.

Qualifications

• Proven experience in SIEM content development and threat detection.
• Strong expertise with Microsoft Sentinel, Azure, and Logic Apps.
• Deep knowledge of MITRE ATT&CK and security principles.

Responsibilities

• Design, implement, and tune advanced detection rules.
• Translate threat intelligence into actionable detection logic.
• Lead SIEM enhancements and content migration.
• Mentor junior engineers and drive best practices.
• Collaborate with IR and threat intel teams.

Skills

SIEM content development

Microsoft Sentinel

Azure

Logic Apps

Analytical skills

Problem-solving skills

Job description

We’re looking for a hands‑on technical expert to join our team and enhance our Microsoft Sentinel & Azure SIEM threat detection capabilities.

The Role

• Design, implement & tune advanced detection rules and analytics.
• Translate threat intelligence into actionable detection logic.
• Lead SIEM enhancements, integrations & content migration.
• Mentor junior engineers and drive best practices.
• Collaborate with IR & threat intel teams to refine detections.

Skills

• Proven experience in SIEM content development & threat detection.
• Strong expertise with Microsoft Sentinel, Azure & Logic Apps.
• Deep knowledge of MITRE ATT&CK, attacker TTPs & security principles.
• Strong analytical & problem‑solving skills.