SIEM & Detection Engineering Lead (Microsoft Sentinel)

AJ Bell; Manchester, Greater London; Hybrid; GBP 90,000 - 130,000; Full time

Benefits offered by this job

27 days holiday

Pension with matched contributions

Discretionary bonus scheme

Share schemes

Private healthcare

Dental plan

Travel and bike loan schemes

Employee Assistance Programme

Job summary

AJ Bell is seeking a Security Monitoring & Detection Engineering Lead to own the architecture and engineering of our monitoring estate, focusing on Microsoft Sentinel and threat detection. You will lead complex investigations, incident response and automation initiatives to reduce customer and business risk.

The role requires deep technical leadership, hands-on expertise, and collaboration with the MSSP and other cyber defence teams to deliver measurable security outcomes.

Qualifications

• Extensive experience across security monitoring, SIEM engineering and incident response within a complex enterprise environment.

Responsibilities

• Own the technical direction, quality and delivery performance of Security Monitoring & Detection Engineering, translating priorities into a clear roadmap for monitoring, detection, investigation and response.
• Lead the architecture, engineering and continued development of our SIEM solution, ensuring the SIEM remains resilient, scalable, cost-effective and aligned with AJ Bell’s technology estate and threat profile.
• Define and govern the onboarding of security telemetry across on-premises, Microsoft Azure, AWS and third-party services, ensuring log sources address visibility gaps and provide value.
• Own the detection engineering lifecycle across requirements, design, testing, deployment, tuning, performance assessment and retirement, supported by version control and controlled release practices.

Skills

Security monitoring

SIEM engineering

Detection engineering

Incident response

Microsoft Defender XDR

Cloud telemetry

Automation

KQL

Education

GCIA

CRIA

CRTO

CEH

BTL2

Tools

Microsoft Sentinel

Azure Logic Apps

PowerShell

Python

Mimecast

Varonis

Job description

AJ Bell is seeking a Security Monitoring & Detection Engineering Lead to own the architecture and engineering of our monitoring estate, focusing on Microsoft Sentinel and threat detection. You will lead complex investigations, incident response and automation initiatives to reduce customer and business risk.

The role requires deep technical leadership, hands-on expertise, and collaboration with the MSSP and other cyber defence teams to deliver measurable security outcomes.