Contract Spy
Remote (London Area, United Kingdom)
We’re looking for a hands-on technical expert to join our team and enhance our Microsoft Sentinel & Azure SIEM threat detection capabilities.
The Role:
Design, implement & tune advanced detection rules and analytics.
Translate threat intelligence into actionable detection logic.
Lead SIEM enhancements, integrations & content migration.
Mentor junior engineers and drive best practices.
Collaborate with IR & threat intel teams to refine detections.
Skills:
Proven experience in SIEM content development & threat detection.
Strong expertise with Microsoft Sentinel, Azure & Logic Apps.
Deep knowledge of MITRE ATT&CK, attacker TTPs & security principles.
Strong analytical & problem-solving skills.