Senior SOC Engineer

Salary: £60,000 - 90,000 per year

Requirements:

• Strong commercial experience with Microsoft Sentinel / Azure Sentinel
• Strong commercial experience with Microsoft Defender / Defender XDR
• Strong KQL / Kusto Query Language capability
• Experience in Security Engineering, SOC Engineering or Microsoft Security Consulting
• SIEM engineering experience rather than solely alert monitoring or incident triage
• Experience in detection engineering and security monitoring optimisation
• Experience with automation, scripting, SOAR or Sentinel playbooks
• Experience with cloud security assessments, controls and risk analysis
• Experience designing and documenting security processes
• Customer-facing technical delivery experience
• Relevant Microsoft certifications are strongly preferred, particularly SC-200, AZ-500, AZ-104 or AZ-305, or equivalent/additional Microsoft Security certifications

Responsibilities:

• Design, implement and support Microsoft Sentinel and Microsoft Defender / Defender XDR solutions
• Engineer and optimise SIEM capabilities across enterprise environments
• Develop and tune KQL queries, analytics and detection rules
• Design and implement SOC automation, playbooks and scripting
• Improve security event detection and response capabilities
• Conduct Microsoft tenant health checks, security audits and architecture reviews
• Analyse cloud security risks and recommend appropriate security controls
• Support complex incident triage and resolution
• Design and document security engineering standards and processes
• Research and implement new Microsoft security capabilities
• Produce high-quality technical and customer-facing documentation
• Work directly with customers and technical stakeholders
• Support and mentor more junior members of the engineering team

Technologies:

• Azure
• Cloud
• Support
• Security
• Architect
• Office 365
• PowerShell
• Python

More:

We are a specialist Microsoft Security organisation working predominantly remotely, with occasional presence in London, and we are growing our Microsoft Cyber Engineering team. We offer the opportunity to work on complex customer engagements across the wider Microsoft Security ecosystem, alongside experienced security professionals. This is a highly specialised environment with continued investment in technical training and development, suited to an established Microsoft Security Engineer who wants to remain hands-on while taking greater ownership of solution design, engineering standards and security operations capabilities.

last updated 34 week of 2026