> Markdown version of [/jobs/ext/4079785-siem-content-platform-engineer](https://www.wearedevelopers.com/jobs/ext/4079785-siem-content-platform-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# SIEM Content & Platform Engineer

- **Company:** Harvey Nash
- **Location:** London, UK
- **Contract:** Permanent contract
- **Skills:** Microsoft Azure, Cyber Security, Continuous Integration, Intrusion Detection and Prevention, Python (Programming Language), Windows PowerShell, Security Information and Event Management, Software Vulnerability Management, Microsoft Power Automate, Mitre Att&ck, Cybercrime, Microsoft Sentinel, Restful APIs, Serverless Computing, Security Orchestration, Automation & Response
- **Published:** October 11, 2026
- **Apply:** https://www.apply4u.co.uk/jobs/siem-content-platform-engineer/51225100

## About the Role

Strong hands-on experience with Microsoft Sentinel and Microsoft Defender XDR in large enterprise environments.
Experience developing and tuning analytics rules, threat hunting queries, correlation logic and detection content aligned to security frameworks such as MITRE ATT&CK.
Proven experience onboarding and optimising cloud, infrastructure, application and security telemetry within a SIEM platform.
Strong automation skills using Logic Apps, Azure Functions, PowerShell, Python and REST APIs.
Experience with security engineering, platform hardening, vulnerability remediation, technical risk assessment and operational support.

Desirable:
Experience with Azure DevOps, CI/CD, Detection-as-Code, and Infrastructure-as-Code.
Microsoft certifications such as SC-200 or AZ-500.

We're looking for a contractor who can act as a subject matter expert across SIEM engineering, detection content development and security monitoring architecture, with a strong background in Microsoft Sentinel, Detection Engineering, Security Automation and Cyber Security Operations.