> Markdown version of [/jobs/ext/2288709-security-engineer-siem-xdr-london-hybrid](https://www.wearedevelopers.com/jobs/ext/2288709-security-engineer-siem-xdr-london-hybrid). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Security Engineer - SIEM/XDR - London (Hybrid)

- **Company:** Nova Source Technologies
- **Location:** London, UK
- **Contract:** Permanent contract
- **Skills:** Microsoft Windows, Application Programming Interfaces (APIs), Build Automation, Microsoft Azure, Cloud Computing Security, Software Documentation, Cyber Security, Computer Programming, Continuous Integration, Linux, Intrusion Detection and Prevention, Python (Programming Language), Windows PowerShell, Kusto Query Language, Security Information and Event Management, Data Logging, Scripting, Azure Security Center, Microsoft Sentinel, Software Version Control, Api Management, Security Orchestration, Automation & Response
- **Published:** August 29, 2026
- **Apply:** https://www.totaljobs.com/job/security-engineer-siem/nova-source-technologies-job107909305

## About the Role

* Strong Security Engineer (SIEM / XDR), security engineering or detection engineering experience
 * Hands-on SIEM and XDR tooling, ideally Microsoft Sentinel and Microsoft Defender for Endpoint
 * Detection engineering, detection-as-code, KQL, security content and alert logic
 * Security telemetry, logging pipelines, data quality and telemetry coverage improvement
 * Cloud security engineering and scalable security architecture design
 * Automation, SOAR, playbooks, enrichment workflows and response improvement
 * Scripting/programming skills such as Python and PowerShell
 * Infrastructure-as-code, CI/CD pipelines, version control and documentation standards
 * API integrations, security tooling integration and onboarding new data sources
 * Windows and Linux operating system knowledge
 * Ability to own engineering backlog, priorities and delivery across detection and platform improvements

Desirable skills as Security Engineer (SIEM / XDR)

 * InfoSec certifications
 * MS certifications
 * Azure certifications

## Description

Security Engineer (SIEM / XDR) - Microsoft Sentinel, Defender, Endpoint, Detection Engineering, Detection-as-Code, KQL, Security Automation, SOAR, Playbooks, Telemetry, Cloud Security, APIs, CI/CD, Infrastructure-as-Code, Python, PowerShell, Windows, Linux, London (Hybrid)

This is an exceptional permanent Security Engineer (SIEM / XDR) opportunity to join a leading tech company.

The Security Engineer (SIEM / XDR) role is Hybrid, in the London office 1-2 times a month. You must be UK based and able to travel to UK sites sometimes at short notice.

As Security Engineer (SIEM / XDR), you will design, build and maintain scalable security detection and response capabilities across SIEM, XDR, cloud and endpoint platforms. The Security Engineer (SIEM / XDR) will set engineering direction, standards and quality across detection, telemetry and automation, with a strong focus on detection-as-code, telemetry optimisation and automated response workflows. The Security Engineer (SIEM / XDR) will work closely with SOC leadership and engineering teams to improve detection effectiveness, integrate new data sources, enhance logging quality, build automation and support scalable cloud security outcomes. Strong Security Engineer (SIEM / XDR), security engineering or detection engineering experience is essential.


## Related Videos

- [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker)
- [JavaScript? No. Java Scripts! - Scripting with Java](https://www.wearedevelopers.com/videos/2094-javascript-no-java-scripts-scripting-with-java)
- [Crypto-secure Data Management with In-Database Blockchain](https://www.wearedevelopers.com/videos/632-crypto-secure-data-management-with-in-database-blockchain)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Docker exec without Docker](https://www.wearedevelopers.com/videos/1094-docker-exec-without-docker)
- [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see)

## Related Articles

- [Software Engineer Salary London](https://www.wearedevelopers.com/magazine/252-software-engineer-salary-london)
- [Data Engineer Salary UK](https://www.wearedevelopers.com/magazine/253-data-engineer-salary-uk)
- [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)
- [The 12 Best Jobs for Software Engineers](https://www.wearedevelopers.com/magazine/401-the-12-best-jobs-for-software-engineers)
- [Where To Find Software Engineering Jobs](https://www.wearedevelopers.com/magazine/396-where-to-find-software-engineering-jobs)
- [Data Analyst Salary in the UK](https://www.wearedevelopers.com/magazine/278-data-analyst-salary-in-the-uk)