SIEM Security Engineer

You will need to login before you can apply for a job.

Hybrid, travel to various sites around England

3 months, scope to extend

Active SC would be advantageous

We are seeking aSentinel SIEM & Cloud Security Engineerto join our clients team and play a critical role in designing, managing, and optimizingMicrosoft Sentinel and Defender for Cloud. This role will focus onSIEM architecture, cloud security posture management, security analytics, and automationto enhance the clients security visibility and resilience. You will have the opportunity to work with cutting–edge security tools and continuously evolve your expertise in cloud security.

Key Responsibilities

• SIEM Architecture & Management:Design, deploy, configure, and maintainMicrosoft Sentinel, ensuring optimal performance, scalability, and integration with security tools.
• Cloud Security Design & Integration:Implement and optimizeMicrosoft Defender for Cloudto enhance cloud security posture, detect misconfigurations, and enforce compliance.
• Log Management & Analysis:Oversee the ingestion, parsing, and normalization of security logs fromAzure, AWS, M365, and hybrid environmentsto improve threat visibility.
• Security Event Correlation & Automation:Develop advanced correlation rules, alerts, playbooks, and automation workflows usingSentinel, KQL, and SOAR integrationsto enhance threat detection and response capabilities.
• Cloud Threat Protection:Monitor, analyse, and strengthen security postures across cloud platforms, utilising Defender for Cloud and SIEM insights.
• Compliance & Governance:Ensure alignment with industry best practices, regulatory frameworks, and internal security policies for cloud security.
• Threat Intelligence & Enrichment:Integratethreat intelligence feedswith Sentinel and Defender for Cloud to enhance Real Time threat analysis.
• Collaboration & Advisory:Work closely with security analysts, cloud engineers, and IT teams to optimize security monitoring, threat detection, and risk mitigation strategies.
• On–Call Support:Provide 24/7 on–call support on a rotational basis for security platform–related issues.
• Emerging Technologies & Innovation:Stay ahead of cloud security advancements, evolving SIEM capabilities, and automation trends to continuously enhance security operations.

Required Skills & Qualifications

• Strong experience designing, managing, and integratingMicrosoft SentinelandMicrosoft Defender for Cloud.
• Proficiency inSIEM architecture, security event correlation, log ingestion, and cloud security analytics.
• Hands–on experience withsecurity automation (SOAR), threat intelligence platforms, and log parsing techniques.
• Strong understanding ofMITRE ATT&CK framework, Zero Trust, and cloud security best practices.
• Knowledge ofAzure, AWS, M365, hybrid environments, and cloud security frameworks (CIS, NIST, ISO 27001, etc.).
• Experience withScripting and automation (PowerShell, Python, KQL, or similar languages)to enhance security operations.
• Excellent problem–solving, analytical, and communication skills with the ability to effectively influence others.
• Ability toadapt quickly to emerging cloud security threats and technologies.
• Security certifications such asAZ–500, MS–500, SC–200, Security Essentials, or equivalentare preferred.

#J-18808-Ljbffr