SIEM Engineer

JR United Kingdom; Sheffield; Remote; GBP 45,000 - 70,000; Full time

Job summary

A leading Microsoft Partner in the UK is seeking a SIEM Engineer. This role involves developing automation for security incident responses and integrations in Microsoft Sentinel, providing an opportunity to work with cutting-edge security technologies. Ideal candidates will have hands-on experience with Microsoft Sentinel and strong API skills while also benefiting from a supportive development environment.

Qualifications

• Hands-on experience with Microsoft Sentinel.
• Strong API development and integration skills.
• Proficiency in KQL, JSON, and PowerShell.

Responsibilities

• Create, maintain, and optimise Logic Apps and Sentinel playbooks.
• Develop API integrations to enhance data collection.
• Design automated workflows for routine SOC tasks.

Skills

Microsoft Sentinel

API development

Azure Logic Apps

PowerShell

KQL

JSON

Communication

Job description

Social network you want to login/join with:

SIEM Engineer, Sheffield, South Yorkshire

Client: Dynamic Search Solutions

Location: Sheffield, South Yorkshire, United Kingdom

Job Category: Other

EU work permit required: Yes

Job Views: 3

Posted: 06.06.2025

Expiry Date: 21.07.2025

Job Description:

Job Title: SIEM Engineer

Location: Remote (UK-based required)

The Company:

An exciting opportunity has arisen at an award-winning Microsoft Partner for a SIEM Engineer. The business is a fast-growing, industry-leading managed service and security provider, serving mid-sized and large enterprise clients.

This role offers the chance to develop expertise in security platforms within an established Microsoft Partner. The company emphasizes staff development, supporting training and certifications, and exposure to cutting-edge technologies in security operations and cyberspace.

Note: You must be based in the UK and eligible for SC Clearance due to government clients.

Responsibilities:

• Create, maintain, and optimise Logic Apps and Sentinel playbooks for incident detection and response automation in Microsoft Sentinel.
• Develop and implement API integrations between Microsoft Sentinel and other systems to enhance data collection, communication, and automation.
• Leverage APIs to streamline security operations and improve SOC efficiency.
• Design and deploy automated workflows for routine SOC tasks like alert enrichment, notifications, and data gathering.
• Collaborate with security analysts and engineers to design automation solutions that enhance security posture.
• Monitor and maintain automation tools, identifying opportunities for improvements.

Skills & Experience:

• Hands-on experience with Microsoft Sentinel, including developing playbooks and incident response processes.
• Experience with Azure Logic Apps for automation.
• Strong API development and integration skills.
• Proficiency in KQL, JSON, and PowerShell.
• Good communication skills.
• Understanding of IT infrastructure: Microsoft 365, Defender XDR, Entra ID, Azure Portal.