Senior Security Engineer (Microsoft XDR and Sentinel)
Position: Senior Security Engineer (Microsoft XDR & Sentinel) Team: Deployment Engineering – Microsoft Practice Location: Remote, UK
BlueVoyant is seeking an experienced Senior Security Engineer to join our Deployment Engineering team. In this pivotal role, you will apply deep expertise in Microsoft Cloud security technologies and SIEM platforms to enable our MDR solutions within customer environments. You will serve as a lead engineer on large and enterprise-scale SIEM and XDR deployments, working hands-on across the Microsoft Security and Azure ecosystem.
Responsibilities:
Lead complex Microsoft Sentinel SIEM and/or Defender XDR implementation projects (remotely) — from design and architecture through deployment and use-case tuning.
Engineer and optimize SIEM/XDR integrations across Microsoft Security and Azure product stacks.
Assess and report on the maturity of client SIEM and XDR deployments.
Develop new detection logic, automation workflows, and reporting use cases based on customer requirements.
Define, build, and support operational and executive-level security dashboards and reports.
Act as a strategic technical lead for enterprise client-facing projects.
Mentor mid-level and junior engineers within the Deployment Engineering team.
Support ongoing maintenance and maturity activities within customer MDR environments.
Identify and implement improvements to enhance delivery processes and technical enablement.
Participate in R&D initiatives aimed at process improvement and new product/feature enhancements.
Contribute to internal knowledge sharing through documentation, training sessions, and public-facing content.
Required Experience & Skills:
Minimum 8 years of experience working with and enabling security technologies.
Strong experience with Azure Cloud, Microsoft Sentinel, and Microsoft Defender solutions.
Proficiency in query languages and scripting such as KQL, SPL, SQL, or PowerShell.
Solid understanding of enterprise IT systems in the context of cybersecurity.
Hands-on engineering experience with SIEM and/or XDR technologies.
Excellent communication skills and ability to work in a dynamic, fast-paced team environment.
Preferred / Nice-to-Have Skills:
Advanced engineering experience with Microsoft Sentinel and/or Defender XDR.
Strong knowledge of Microsoft Defender security capabilities.
Experience in customer-facing consulting or engineering roles.
Expertise in:
Kusto Query Language (advanced)
Azure Logic Apps, Function Apps, and related Azure automation services
Microsoft 365 platforms (Exchange Online, Teams, SharePoint)
Microsoft Intune
Incident investigation and response experience.
Proficiency in Python, PowerShell, or C#/.NET.
Experience with Linux configuration and administration.
About BlueVoyant At BlueVoyant, we recognize that effective cyber security requires active prevention and defense across both your organization and supply chain. Our proprietary data, analytics, and technology, coupled with deep expertise, works as a force multiplier to secure your full ecosystem. Accuracy! Actionability! Timeliness! Scalability! Led by CEO, Jim Rosenthal, BlueVoyant’s highly skilled team includes former government cyber officials with extensive frontline experience in responding to advanced cyber threats on behalf of the National Security Agency, Federal Bureau of Investigation, Unit 8200, and GCHQ, together with private sector experts. BlueVoyant services utilize large real-time datasets with industry leading analytics and technologies. Founded in 2017 by Fortune 500 executives, including Executive Chairman, Tom Glocer, and former Government cyber officials, BlueVoyant is headquartered in New York City and has offices in Maryland, Tel Aviv, San Francisco, London, Budapest, and Latin America. BlueVoyant uses AI-assisted tools within our applicant tracking system to help identify candidates whose experience and skills best match the requirements of a role. This technology provides hiring teams with additional insights to support fair and efficient hiring decisions. Please note that all applications are reviewed by a member of our hiring team, and final hiring decisions are made by humans, not AI. By submitting your application, you acknowledge that AI tools may assist in the evaluation of your resume as part of the recruitment process. For more information on how we process your personal data, please review our Candidate Privacy Notice available at https://www.bluevoyant.com/candidate-privacy-notice. All employees must be authorized to work in the United Kingdom or in the Republic of Ireland. BlueVoyant provides equal employment opportunities to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability or genetics. In addition to federal law requirements, BlueVoyant complies with applicable state and local laws governing non-discrimination in employment in every location in which the company has facilities.
BlueVoyant Candidate Privacy Notice
To understand how we secure and manage your personal data upon submitting a job application, please see our Candidate Privacy Notice, which can be found here - Candidate Privacy Notice
About the job
Apply for this position
Senior Security Engineer (Microsoft XDR and Sentinel)
Position: Senior Security Engineer (Microsoft XDR & Sentinel) Team: Deployment Engineering – Microsoft Practice Location: Remote, UK
BlueVoyant is seeking an experienced Senior Security Engineer to join our Deployment Engineering team. In this pivotal role, you will apply deep expertise in Microsoft Cloud security technologies and SIEM platforms to enable our MDR solutions within customer environments. You will serve as a lead engineer on large and enterprise-scale SIEM and XDR deployments, working hands-on across the Microsoft Security and Azure ecosystem.
Responsibilities:
Lead complex Microsoft Sentinel SIEM and/or Defender XDR implementation projects (remotely) — from design and architecture through deployment and use-case tuning.
Engineer and optimize SIEM/XDR integrations across Microsoft Security and Azure product stacks.
Assess and report on the maturity of client SIEM and XDR deployments.
Develop new detection logic, automation workflows, and reporting use cases based on customer requirements.
Define, build, and support operational and executive-level security dashboards and reports.
Act as a strategic technical lead for enterprise client-facing projects.
Mentor mid-level and junior engineers within the Deployment Engineering team.
Support ongoing maintenance and maturity activities within customer MDR environments.
Identify and implement improvements to enhance delivery processes and technical enablement.
Participate in R&D initiatives aimed at process improvement and new product/feature enhancements.
Contribute to internal knowledge sharing through documentation, training sessions, and public-facing content.
Required Experience & Skills:
Minimum 8 years of experience working with and enabling security technologies.
Strong experience with Azure Cloud, Microsoft Sentinel, and Microsoft Defender solutions.
Proficiency in query languages and scripting such as KQL, SPL, SQL, or PowerShell.
Solid understanding of enterprise IT systems in the context of cybersecurity.
Hands-on engineering experience with SIEM and/or XDR technologies.
Excellent communication skills and ability to work in a dynamic, fast-paced team environment.
Preferred / Nice-to-Have Skills:
Advanced engineering experience with Microsoft Sentinel and/or Defender XDR.
Strong knowledge of Microsoft Defender security capabilities.
Experience in customer-facing consulting or engineering roles.
Expertise in:
Kusto Query Language (advanced)
Azure Logic Apps, Function Apps, and related Azure automation services
Microsoft 365 platforms (Exchange Online, Teams, SharePoint)
Microsoft Intune
Incident investigation and response experience.
Proficiency in Python, PowerShell, or C#/.NET.
Experience with Linux configuration and administration.
About BlueVoyant At BlueVoyant, we recognize that effective cyber security requires active prevention and defense across both your organization and supply chain. Our proprietary data, analytics, and technology, coupled with deep expertise, works as a force multiplier to secure your full ecosystem. Accuracy! Actionability! Timeliness! Scalability! Led by CEO, Jim Rosenthal, BlueVoyant’s highly skilled team includes former government cyber officials with extensive frontline experience in responding to advanced cyber threats on behalf of the National Security Agency, Federal Bureau of Investigation, Unit 8200, and GCHQ, together with private sector experts. BlueVoyant services utilize large real-time datasets with industry leading analytics and technologies. Founded in 2017 by Fortune 500 executives, including Executive Chairman, Tom Glocer, and former Government cyber officials, BlueVoyant is headquartered in New York City and has offices in Maryland, Tel Aviv, San Francisco, London, Budapest, and Latin America. BlueVoyant uses AI-assisted tools within our applicant tracking system to help identify candidates whose experience and skills best match the requirements of a role. This technology provides hiring teams with additional insights to support fair and efficient hiring decisions. Please note that all applications are reviewed by a member of our hiring team, and final hiring decisions are made by humans, not AI. By submitting your application, you acknowledge that AI tools may assist in the evaluation of your resume as part of the recruitment process. For more information on how we process your personal data, please review our Candidate Privacy Notice available at https://www.bluevoyant.com/candidate-privacy-notice. All employees must be authorized to work in the United Kingdom or in the Republic of Ireland. BlueVoyant provides equal employment opportunities to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability or genetics. In addition to federal law requirements, BlueVoyant complies with applicable state and local laws governing non-discrimination in employment in every location in which the company has facilities.
BlueVoyant Candidate Privacy Notice
To understand how we secure and manage your personal data upon submitting a job application, please see our Candidate Privacy Notice, which can be found here - Candidate Privacy Notice