Назад
Company hidden
9 дней назад

OT SIEM Engineer (Microsoft Sentinel)

Формат работы
hybrid
Тип работы
fulltime
Грейд
middle
Английский
b2
Страна
UK
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
OT SIEM Engineer (Microsoft Sentinel): Developing and enhancing SIEM capabilities across enterprise and Operational Technology environments with an accent on security telemetry integration, detection engineering, and automation. Focus on building KQL detections, migrating LogRhythm data into Microsoft Sentinel, and implementing CI/CD and SOAR workflows for regulated Critical National Infrastructure environments.

Location: Hybrid in Glasgow or Aberdeen, Scotland, United Kingdom

Company

hirify.global delivers managed services, cyber security, cloud, data, AI, and digital transformation solutions for critical national infrastructure, energy, public sector, and enterprise customers.

What you will do

  • Onboard and integrate enterprise and Operational Technology log sources into Microsoft Sentinel.
  • Develop parsers, data transformations, normalisation processes, KQL queries, analytics rules, alerts, and detection logic.
  • Build and support Logic Apps, Playbooks, and SOAR automation workflows for security operations.
  • Support migration of security telemetry from LogRhythm and other existing SIEM platforms into Microsoft Sentinel.
  • Implement CI/CD pipelines with Azure DevOps and Git to deploy and manage Sentinel content and integrations.
  • Collaborate with Cyber Defence and Security Operations teams on threat hunting, incident response, detection engineering, and continuous improvement.

Requirements

  • Hands-on experience in SIEM engineering, administration, or security monitoring.
  • Experience onboarding log sources, integrating security telemetry, parsing and normalising events, and developing correlations.
  • Experience creating and optimising queries with KQL or equivalent SIEM query languages.
  • Knowledge of threat detection, use-case development, alert tuning, incident response, and threat hunting.
  • Experience with Logic Apps, Playbooks, SOAR platforms, Git, Azure DevOps, or comparable tools.
  • Strong analytical, troubleshooting, communication, and technical collaboration skills.

Nice to have

  • Hands-on Microsoft Sentinel engineering and administration experience.
  • Experience with LogRhythm, Splunk, QRadar, ArcSight, or Elastic.
  • Knowledge of Microsoft Azure security services, cloud-native monitoring, NIST, MITRE ATT&CK, and Cyber Essentials.
  • Experience in Operational Technology, Critical National Infrastructure, utilities, energy, or SIEM migration programmes.
  • Current Security Check clearance or eligibility to obtain it.

Culture & Benefits

  • Personalised career development plans and learning opportunities.
  • Flexible working arrangements supporting work-life balance.
  • Generous annual leave and enhanced family-friendly benefits.
  • Pension scheme and access to private health, wellbeing, and insurance schemes.
  • Inclusive workplace with equal-opportunity employment and support for accessible hiring.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →