Security Engineer

Whitehall resources are looking for a Senior SIEM Engineer / Technical SME. This role is mainly remote working with occasional travel to the office in West-Surrey for an initial 6‑month contract.

Inside IR35

Skills and Experience

• KQL: Able to develop and maintain high‑fidelity detection rules using Kusto Query Language
• Able to utilize KQL for detection engineering, analytics, and threat‑hunting.
• Microsoft Sentinel: Act as the technical SME
• Hands‑on experience including analytics rules, connectors, and workbooks.
• Ensure platform reliability and data quality.
• Coordinate the end‑to‑end onboarding of log sources into Sentinel.
• Technical SME for Sentinel set up
• Strong understanding of cloud and on premises logging (Windows, Linux, application, DB, identity).
• Experience onboarding data using AMA, DCRs, syslog/CEF, and Event Hub integrations.
• Comfortable using AI assisted tooling (e.g., Copilot for Security) to enhance productivity.

Overview

Expert in KQL

#J-18808-Ljbffr…