SIEM Detection Engineer - Remote

RiverSafe; Remote; GBP 70,000 - 90,000; Full time

Job summary

A cybersecurity solutions provider in Greater London is seeking a hands-on technical expert to enhance its Microsoft Sentinel and Azure SIEM threat detection capabilities. The ideal candidate will design and implement advanced detection rules, mentor junior engineers, and collaborate with incident response teams to refine detections. Experience in SIEM content development and strong analytical skills are essential. This role presents an excellent opportunity to lead SIEM enhancements in a dynamic environment.

Qualifications

• Proven experience in SIEM content development and threat detection.
• Strong expertise with Microsoft Sentinel, Azure, and Logic Apps.
• Deep knowledge of MITRE ATT&CK, attacker TTPs, and security principles.

Responsibilities

• Design, implement, and tune advanced detection rules and analytics.
• Translate threat intelligence into actionable detection logic.
• Lead SIEM enhancements, integrations, and content migration.
• Mentor junior engineers and drive best practices.
• Collaborate with IR and threat intel teams to refine detections.

Skills

SIEM content development

Microsoft Sentinel

Azure

Logic Apps

MITRE ATT&CK

analytical skills

problem-solving skills

Job description

We’re looking for a hands‑on technical expert to join our team and enhance our Microsoft Sentinel & Azure SIEM threat detection capabilities.

The Role

• Design, implement & tune advanced detection rules and analytics.
• Translate threat intelligence into actionable detection logic.
• Lead SIEM enhancements, integrations & content migration.
• Mentor junior engineers and drive best practices.
• Collaborate with IR & threat intel teams to refine detections.

Skills

• Proven experience in SIEM content development & threat detection.
• Strong expertise with Microsoft Sentinel, Azure & Logic Apps.
• Deep knowledge of MITRE ATT&CK, attacker TTPs & security principles.
• Strong analytical & problem‑solving skills.