SIEM Detection Engineer - Remote

RiverSafe; Remote; GBP 80,000 - 100,000; Full time

Job summary

A cybersecurity solutions provider located in Bolton is seeking a hands-on technical expert to enhance their Microsoft Sentinel and Azure SIEM threat detection capabilities. The role involves designing and implementing advanced detection analytics, mentoring junior engineers, and collaborating with incident response teams. The ideal candidate will possess proven experience in SIEM content development, along with strong expertise in Microsoft Sentinel, Azure, and security principles.

Qualifications

• Proven experience in SIEM content development and threat detection.
• Strong expertise with Microsoft Sentinel, Azure and Logic Apps.
• Deep knowledge of MITRE ATT&CK and security principles.

Responsibilities

• Design, implement & tune advanced detection rules and analytics.
• Translate threat intelligence into actionable detection logic.
• Lead SIEM enhancements, integrations & content migration.
• Mentor junior engineers and drive best practices.
• Collaborate with IR & threat intel teams to refine detections.

Skills

SIEM content development

Microsoft Sentinel

Azure

Logic Apps

Analytical skills

Problem-solving skills

Job description

We’re looking for a hands‑on technical expert to join our team and enhance our Microsoft Sentinel & Azure SIEM threat detection capabilities.

The Role

• Design, implement & tune advanced detection rules and analytics.
• Translate threat intelligence into actionable detection logic.
• Lead SIEM enhancements, integrations & content migration.
• Mentor junior engineers and drive best practices.
• Collaborate with IR & threat intel teams to refine detections.

Skills

• Proven experience in SIEM content development & threat detection.
• Strong expertise with Microsoft Sentinel, Azure & Logic Apps.
• Deep knowledge of MITRE ATT&CK, attacker TTPs & security principles.
• Strong analytical & problem‑solving skills.