Security Engineer (SIEM / XDR) - Microsoft Sentinel, Defender - Remote

The Security Engineer (SIEM / XDR) role is Remote with UK wide travel as required. You must be UK based and able to travel to UK sites sometimes at short notice.

As Security Engineer (SIEM / XDR), you will design, build and maintain scalable security detection and response capabilities across SIEM, XDR, cloud and endpoint platforms. The Security Engineer (SIEM / XDR) will set engineering direction, standards and quality across detection, telemetry and automation, with a strong focus on detection-as-code, telemetry optimisation and automated response workflows. The Security Engineer (SIEM / XDR) will work closely with SOC leadership and engineering teams to improve detection effectiveness, integrate new data sources, enhance logging quality, build automation and support scalable cloud security outcomes. Strong Security Engineer (SIEM / XDR), security engineering or detection engineering experience is essential., * Strong Security Engineer (SIEM / XDR), security engineering or detection engineering experience

• Hands-on SIEM and XDR tooling
• Microsoft Sentinel and Microsoft Defender for Endpoint
• Detection engineering, detection-as-code, KQL, security content and alert logic
• Automation, SOAR, playbooks, enrichment workflows and response improvement
• Scripting/programming with Python and/or PowerShell
• Infrastructure-as-code, CI/CD pipelines, version control
• API integrations
• Windows
• Linux

Desirable skills as Security Engineer (SIEM / XDR)

• InfoSec certifications
• MS certifications
• Azure certifications

This is an exceptional Security Engineer (SIEM / XDR) opportunity with a great package and career progression on offer.

Key skills: Security Engineer (SIEM / XDR), SIEM, XDR, Microsoft Sentinel, Microsoft Defender for Endpoint, Detection Engineering, Detection-as-Code, KQL, Security Automation, SOAR, Playbooks, Telemetry, Cloud Security, APIs, CI/CD, Infrastructure-as-Code, Python, PowerShell, Windows, Linux, Remote