SIEM Content & Platform Engineer

SIEM Content & Platform Engineer - London (Remote/Hybrid) - Outside IR35 Contract

We are supporting an exciting client who is looking for an experienced SIEM Content & Platform Engineer to join their Cyber Security team on a contract basis. This role will focus on security monitoring, detection engineering, platform optimisation, automation, and improving enterprise cyber resilience.

Requirements:

1. Strong hands-on experience with Microsoft Sentinel and Microsoft Defender XDR in large enterprise environments.
2. Experience developing and tuning analytics rules, threat hunting queries, correlation logic and detection content aligned to security frameworks such as MITRE ATT&CK.
3. Proven experience onboarding and optimising cloud, infrastructure, application and security telemetry within a SIEM platform.
4. Strong automation skills using Logic Apps, Azure Functions, PowerShell, Python and REST APIs.
5. Experience with security engineering, platform hardening, vulnerability remediation, technical risk assessment and operational support.

Desirable:

• Experience with Azure DevOps, CI/CD, Detection-as-Code, and Infrastructure-as-Code.
• Microsoft certifications such as SC-200 or AZ-500.

We're looking for a contractor who can act as a subject matter expert across SIEM engineering, detection content development and security monitoring architecture, with a strong background in Microsoft Sentinel, Detection Engineering, Security Automation and Cyber Security Operations.

SIEM Content & Platform Engineer - London (Remote/Hybrid) - Outside IR35 Contract