Senior Security Engineer - Microsoft Sentinel & Defender XDR

Reference: xw5jsge1ge1vi75r9lse

We are seeking a Senior Security Engineer specialising in Microsoft Sentinel and Microsoft Defender XDR to design, implement and continuously improve cloud-based security monitoring and incident response capabilities. You will play a key role in protecting enterprise environments by developing effective detection strategies, improving visibility across Microsoft 365, Azure and endpoint platforms, and supporting the investigation and remediation of complex security incidents.

Your responsibilities will include administering and optimising Microsoft Sentinel and Defender XDR, creating and tuning analytics rules, incident workflows, workbooks, automation rules and playbooks, and developing advanced hunting queries using Kusto Query Language (KQL). You will integrate security data sources, onboard and maintain connectors, reduce false positives and ensure alerts are prioritised according to risk. You will investigate suspected threats, coordinate containment and recovery activities, perform root-cause analysis, and contribute to post-incident reviews. The role will also involve building automation through Logic Apps, maintaining clear operational documentation, producing security metrics and advising stakeholders on improvements to detection and response processes.

Applicants should have substantial experience in security engineering, security operations or incident response, with strong hands-on knowledge of Microsoft Sentinel, Microsoft Defender for Endpoint, Defender for Identity, Defender for Office 365 and Defender for Cloud Apps. A strong understanding of identity and access management, endpoint security, cloud architecture, network security, threat intelligence and common attack techniques is essential. You should be confident writing and optimising KQL queries and working with automation and orchestration technologies. Experience with security frameworks such as MITRE ATT&CK, NIST or CIS, alongside relevant Microsoft or industry certifications, would be advantageous. Excellent communication skills, a methodical approach and the ability to work independently while collaborating with technical and non-technical teams are required.

COMPETITIVE SALARY
Added 09/10/2026
Reference: xw5jsge1ge1vi75r9lse

Senior Security Engineer - Microsoft Sentinel & Defender XDR

London, England, United Kingdom Permanent Security Engineer

Other similar jobs

Security Engineer - Microsoft Sentinel & Defender XDR (Various levels)

Added 29/09/2026

We are seeking Security Engineers at various levels to help design, implement and operate security monitoring and incident response capabilities using Microsoft Sentinel and Microsoft Defender XDR. You will work with security, infrastructure and application teams to improve the detection, investigation and remediation of cyber threats across cloud, hybrid and on-premises environments. This role offers the opportunity to contribute to security engineering projects while developing expertise across Microsoft security technologies. Responsibilities will include creating and tuning analytics rules, detection logic, automation playbooks and workbooks in Microsoft Sentinel; configuring and managing Microsoft Defender XDR capabilities across endpoints, identities, email, applications and...

Learn more

Security Engineer - Microsoft Sentinel & Defender XDR (Various levels)

Added 01/09/2026

We are seeking Security Engineers at various levels to design, implement, and improve cloud-based security monitoring and incident response capabilities using Microsoft Sentinel and Microsoft Defender XDR. You will help protect critical systems, applications, identities, and data by developing effective detection, investigation, and response solutions across the Microsoft security ecosystem. The role offers opportunities to work on both operational security and strategic improvement initiatives in a collaborative, technically focused environment. Responsibilities may include onboarding and normalising data sources in Microsoft Sentinel; developing and tuning analytics rules, automation rules, workbooks, dashboards, and playbooks; investigating alerts and incidents across Microsoft Defender XDR;...

Learn more

Senior Cyber Security Consultant

Added 15/10/2026

We are seeking a Senior Cyber Security Consultant to provide expert advice and practical support across a diverse portfolio of clients and projects. You will help organisations understand, manage and reduce their cyber security risks, translating complex technical issues into clear, commercially focused recommendations. This is a client-facing role requiring strong communication skills, sound judgement and the ability to work effectively with stakeholders at all levels. Your responsibilities will include leading cyber security assessments, developing and reviewing security strategies, and advising on governance, risk and compliance. You will contribute to security architecture reviews, threat and vulnerability assessments, incident readiness, third-party...

Learn more

M365 Security Consultant ( M365 security, Defender, Sentinel and Microsoft security stack.)

Added 19/08/2026

We are seeking a skilled M365 Security Consultant with a strong focus on M365 security, Microsoft Defender, Sentinel, and the broader Microsoft security stack. In this critical role, you will be responsible for designing, implementing, and managing security solutions that protect our clients’ environments. You will work closely with cross-functional teams to assess security requirements, identify vulnerabilities, and recommend appropriate security measures. Your expertise will help in developing security policies, procedures, and best practices tailored to Microsoft 365 environments. The ideal candidate will have hands-on experience with Microsoft security technologies, particularly Defender for Endpoint, Microsoft Sentinel, and Azure Active Directory....

Learn more

Senior Microsoft Security Engineer (XDR, IRM, Deception Engineering)

Added 28/09/2026

We are seeking a Senior Security Engineer to design, implement and continuously improve enterprise security capabilities across extended detection and response (XDR), incident response management (IRM) and deception engineering. This role will help strengthen the organisation’s ability to identify, contain and recover from sophisticated cyber threats, while improving the quality, speed and consistency of security operations. You will work closely with security operations, infrastructure, identity, cloud, application and risk teams to translate threat intelligence and business requirements into practical defensive controls. Responsibilities will include developing and tuning detection rules, analytics, automation and response playbooks across endpoint, identity, email, cloud and...

Learn more

Senior Microsoft Identity Engineer (Entra ID and Microsoft 365)

Added 02/10/2026

We are seeking a Senior Microsoft Identity Engineer to design, implement and maintain secure identity services across Entra ID and Microsoft 365. This is a hands-on role for an experienced professional who can lead identity and access management initiatives, improve security controls and provide technical guidance across a complex cloud environment. You will work closely with infrastructure, security, applications and service teams to deliver reliable, scalable and well-governed identity solutions. Your responsibilities will include administering and optimising Entra ID, including users, groups, roles, administrative units, enterprise applications, service principals and conditional access policies. You will lead the design and support...

Learn more

Senior SOC Engineer (Sentinel One)

Added 06/10/2026

We are seeking a Senior SOC Engineer to strengthen a security operations function responsible for protecting critical systems, networks, applications, and data. In this role, you will provide advanced technical expertise across security monitoring, incident detection, investigation, and response, with a particular focus on SentinelOne and endpoint protection capabilities. You will work closely with security analysts, infrastructure teams, and other technical stakeholders to identify threats, contain incidents, and improve the organisation’s overall security posture. Your responsibilities will include tuning and maintaining SentinelOne policies, detection rules, alerts, and response workflows; investigating complex endpoint and network security events; leading or supporting incident...

Learn more

Microsoft Security Platform Security Engineer

Added 24/09/2026

We are seeking a Security Platform Security Engineer to design, implement and maintain robust security capabilities across enterprise technology environments. This role will help protect identities, endpoints, cloud services, applications and data by developing effective security controls, improving operational resilience and supporting the organisation’s wider cyber-security strategy. You will work closely with infrastructure, engineering, architecture, compliance and incident response teams to identify risks and deliver practical, scalable solutions. Key responsibilities include configuring and administering security platforms, monitoring alerts and investigations, responding to incidents, and tuning detection and prevention controls. You will support identity and access management, endpoint protection, vulnerability management,...

Learn more

Microsoft Security Platform Security Engineer

Added 23/09/2026

We are seeking a Security Platform Security Engineer to design, implement and maintain secure, resilient identity, endpoint and cloud security capabilities across a complex technology environment. You will work closely with infrastructure, engineering, operations and governance teams to protect systems, applications and data while enabling secure business delivery. The role requires a practical understanding of modern security platforms, strong problem-solving skills and the ability to translate security requirements into reliable technical solutions. Your responsibilities will include deploying and administering security controls across cloud and on-premises environments; managing identity and access controls, privileged access, endpoint protection, vulnerability management and security monitoring;...

Learn more

Security Engineer – Microsoft Purview, Endpoint & Data Protection

Added 02/10/2026

We are seeking a Security Engineer specialising in Microsoft Purview, endpoint security and data protection to help strengthen the organisation’s information security capabilities. In this role, you will design, implement and maintain security controls across Microsoft 365, endpoints and cloud environments, ensuring sensitive information is appropriately identified, classified, monitored and protected. You will work closely with infrastructure, identity, compliance and business teams to translate security requirements into practical, scalable solutions. Your responsibilities will include configuring and administering Microsoft Purview capabilities such as sensitivity labels, data loss prevention policies, retention policies, insider risk controls, information protection and audit functionality. You will...

Learn more

Security Engineer – Microsoft Purview, Endpoint & Data Protection

Added 02/10/2026

We are seeking a Security Engineer specialising in Microsoft Purview, endpoint security and data protection to strengthen enterprise-wide information security capabilities. This role will design, implement and maintain controls that protect sensitive data across cloud services, endpoints, applications and collaboration platforms. You will work closely with security, infrastructure, compliance and business teams to translate regulatory and operational requirements into practical technical solutions. Key responsibilities will include configuring and administering Microsoft Purview capabilities such as sensitivity labels, data loss prevention policies, retention and records management, insider risk controls, audit features and information protection workflows. You will help develop and enforce endpoint...

Learn more

Security Client Solutions & Growth Manager (Microsoft Security)

Added 23/09/2026

We are seeking a Security Client Solutions & Growth Manager to lead the development of security-focused client relationships and drive sustainable business growth. This role will work closely with customers, technology specialists, delivery teams and commercial stakeholders to understand complex security needs and translate them into practical, outcome-focused solutions. You will act as a trusted adviser throughout the client lifecycle, from early discovery and solution design through to proposal, implementation and ongoing account development. Key responsibilities will include identifying new opportunities, shaping account and growth strategies, managing a qualified pipeline, and contributing to bids, proposals and presentations. You will develop...

Learn more

Microsoft Security Consultant

Added 15/10/2026

We are seeking a Microsoft Security Consultant to help organisations strengthen their security posture across Microsoft cloud and enterprise technologies. This role will involve working with clients to understand their risk landscape, assess existing controls and design practical, sustainable security solutions. You will provide expert guidance across Microsoft Azure, Microsoft 365, Entra ID, Defender and related security services, supporting customers through both strategic planning and technical implementation. Key responsibilities will include conducting security assessments, developing roadmaps and advising on identity and access management, endpoint protection, cloud security, threat detection, data protection and security operations. You will configure and optimise Microsoft...

Learn more
At least 8 characters, 1 uppercase, 1 lowercase and 1 special character or number
Your file must be a doc, docx or pdf. No larger than 5MB.