Cyber Security Engineer - Up to

Cyber Security Engineer

Inside IR35 - Up to £650 per day

Hybrid in London (2 Days per week on site)

We are seeking a Cyber Security Engineer to support and enhance enterprise security tooling, SIEM operations, and security monitoring within a global environment. The role will focus on Microsoft security technologies, detection engineering, automation, and threat monitoring.

Key Responsibilities

1. Manage and optimise Microsoft Sentinel, Defender, Purview, and associated security platforms.
2. Lead log source onboarding, dashboard development, data integration, and monitoring improvements.
3. Develop SIEM detections, KQL queries, security use cases, and monitoring content.
4. Build automation solutions using Logic Apps, DCR Filtering, PowerShell, Python, and APIs.
5. Support security platform enhancements, integrations, and threat detection initiatives.

Required Skills

1. Strong Microsoft Sentinel experience.
2. Advanced KQL knowledge.
3. Logic Apps, DCR Filtering, and security automation experience.
4. Log source onboarding, dashboard creation, and security logging expertise.
5. Use case development, detection engineering, and SIEM operations.
6. Scripting skills with PowerShell and/or Python.

Desirable

1. CyberArk/PAM experience.
2. Windows Server and Active Directory knowledge.
3. Networking fundamentals (DNS, TCP/IP, Firewalls).
4. General cybersecurity, incident response, and threat detection experience.
5. Financial Services background and relevant security certifications (CISSP, CISM, GIAC, Microsoft, AWS, GCP)