TECHTRACE PARTNERS
Cyber Security Engineer
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Microsoft Sentinel Engineer
UK Remote | Up to £85,000 | Permanent
TechTrace Partners are supporting a specialist cyber security services provider that is hiring a UK-based Microsoft Sentinel Engineer.
This is a hands-on engineering role focused on onboarding, maintaining and improving Microsoft Sentinel across customer environments. You will work across client onboarding, log source integration, data connectors, ingestion troubleshooting, KQL analytics rules, platform health, tuning and ongoing service improvement.
The role sits within a specialist security engineering team and will involve working closely with customers, internal SOC teams and wider technical stakeholders to ensure Microsoft Sentinel environments are configured, maintained and operating effectively.
What you’ll be doing
- Onboard new customers into Microsoft Sentinel, ensuring the right log sources are connected and data is flowing correctly.
- Deploy, configure and optimise Sentinel data connectors, analytics rules, workbooks, hunting queries and related Microsoft security tooling.
- Troubleshoot ingestion issues, improve log quality, reduce noise and support detection tuning.
- Help build repeatable ways of delivering Sentinel across multiple customer environments.
- Work with customer technical teams to understand requirements, resolve blockers and align security monitoring to the customer’s environment and risk profile.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
What we’re looking for
We are looking for someone with real hands-on Microsoft Sentinel experience. You should be comfortable working with:
- Sentinel onboarding
- Data connectors
- Log ingestion
- KQL
- Analytics rules
- Platform tuning
- Platform maintenance
- Customer technical discussions
The strongest fit will likely come from an MSSP, MDR provider, Microsoft security consultancy, managed SOC, or internal security engineering environment where you have owned SIEM engineering work.
You should be able to explain how customer log sources are onboarded, how Sentinel is configured, how data quality is checked, how analytics rules are tuned, and how the platform supports security investigation and response.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Relevant experience
- Microsoft Sentinel
- KQL
- Microsoft Defender XDR
- Microsoft Entra ID
- Log Analytics
- Data connectors
- Log source onboarding
- SIEM ingestion
- Analytics rules
- Detection tuning
- Azure Monitor Agent / DCRs
- Syslog / CEF
- WEF / WEC / Sysmon
- Azure DevOps / Git
- MSSP, MDR or managed SOC environments
You do not need to tick every box, but Microsoft Sentinel experience is essential.
This role may suit someone who wants:
- A UK-based remote Microsoft Sentinel engineering role
- Exposure to multiple customer environments
- A hands-on Microsoft security engineering position
- A role combining platform engineering, customer delivery and service improvement
- The chance to improve how Sentinel is onboarded, maintained and optimised across customers
Package
- Salary up to £85,000 depending on experience
- UK remote working
- Full-time permanent role
- Occasional out-of-hours support may be required depending on customer needs
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Location