Microsoft Sentinel SME (Outside IR35)

An experienced Microsoft Sentinel SME is required to support a major security transformation programme within a large enterprise environment. The successful consultant will take ownership of the Microsoft Sentinel platform, helping to improve detection capabilities, optimise existing configurations, develop new use cases, and enhance the organisation's overall security monitoring and response capabilities. This role would suit a hands‑on Security Engineer, Detection Engineer, SIEM Engineer, or Security Operations specialist with deep Microsoft security expertise and extensive experience working with Sentinel in complex enterprise environments.

Key Responsibilities

• Act as the technical lead and subject matter expert for Microsoft Sentinel
• Review and optimise existing Sentinel deployments, analytics rules, and workbooks
• Design, build, and tune threat‑detection use cases aligned with current threats
• Develop advanced KQL queries f...