Remote Sentinel Defender & Incident Response Specialist

TXP; San Francisco (CA); Hybrid; GBP 54,000 - 90,000; Part time

Job summary

TXP is seeking an experienced Sentinel Defender Consultant to support monitoring, investigation and response to cyber security incidents within a Microsoft security environment. This remote contract role spans 2 months with a daily rate of 440–490 GBP Inside IR35.

You will work within a Security Operations team, applying Microsoft Sentinel and Defender tools to detect threats, triage incidents, and contribute to detection engineering and incident reports.

Qualifications

• Hands-on experience with Microsoft Sentinel.
• Experience with Microsoft Defender technologies (Endpoint/Identity/Cloud/O365).
• Experience investigating and responding to cyber security incidents.
• Strong understanding of security operations and incident response processes.
• Experience analysing Windows events, Azure logs and cloud telemetry.
• Knowledge of cyber security frameworks, attack methodologies and threat actor tactics.
• Experience developing and tuning SIEM detections.
• Strong Kusto Query Language (KQL) skills.

Responsibilities

• Monitor and investigate security alerts generated by Microsoft Sentinel and Defender.
• Triage and analyse security incidents to determine impact and response actions.
• Conduct threat hunting to identify suspicious activity.
• Analyse logs and telemetry from multiple data sources.
• Create, tune and optimise Sentinel analytics rules, workbooks and detection use cases.
• Support incident response activities including containment and recovery.
• Maintain and improve security monitoring and alerting capabilities.
• Collaborate with infrastructure, cloud, networking and application teams during investigations.
• Produce clear incident reports and security documentation.
• Contribute to SOC process and detection engineering improvements.

Skills

Microsoft Sentinel

Microsoft Defender for Endpoint

Microsoft Defender for Identity

Microsoft Defender for Cloud

Microsoft Defender for Office 365

KQL (Kusto)

Incident response

SOC monitoring

Windows event analysis

Azure logs

Threat hunting

Detection engineering

Job description

TXP is seeking an experienced Sentinel Defender Consultant to support monitoring, investigation and response to cyber security incidents within a Microsoft security environment. This remote contract role spans 2 months with a daily rate of 440–490 GBP Inside IR35.

You will work within a Security Operations team, applying Microsoft Sentinel and Defender tools to detect threats, triage incidents, and contribute to detection engineering and incident reports.