Security Operations Developer

Security Operations Developer

We provide outsourced security event monitoring and incident response services to a wide variety of clients using a Microsoft centric technology stack. We are looking to fill several developer positions in a rapidly expanding security operations team.

If you have a background in security operations, deployment or software development and would like to expand your skills in a Microsoft focused security development role, this could be the position for you.

As a Microsoft partner, we invest heavily in training and provide the time and support for you to achieve accreditations from Microsoft Security Operations Analyst Associate through to Microsoft DevOps Engineer Expert.

Location

• Flexible work from home policy.

Key Responsibilities

• Create, maintain, and optimize Logic Apps and Sentinel playbooks to automate incident detection and response workflows in Microsoft Sentinel.

• Develop and implement API integrations between Microsoft Sentinel and other systems to enhance data collection, cross-system communication, and automation.

• Leverage APIs to streamline security operations and increase the SOC’s efficiency.

• Design and deploy automated workflows to handle routine SOC tasks, including alert enrichment, notifications, and data gathering.

• Work closely with security analysts and engineers to design automation solutions to improve overall security posture.

• Monitor and maintain automation tools to ensure they are functioning as expected, identifying opportunities for further improvements.

Essential Experience

• Hands-on experience with Microsoft Sentinel: Proven track record in developing playbooks, automation workflows, and incident response processes within Microsoft Sentinel.

• Experience in building and maintaining workflows with Azure Logic Apps to automate processes.

• Strong experience in API development and integration.

• Proficiency in KQL, JSON and PowerShell.

• Good written and verbal communication skills.

• Technical understanding of IT infrastructure

• Microsoft 365 suite

• Defender XDR

• Entra ID (Azure Active Directory)

• Azure portal

Preferred Experience

• Familiarity with Microsoft Teams automation, including integration with Sentinel for notifications.

• Experience building automation for routine tasks, such as alert enrichment, incident management, and notifications.

• Experience with Microsoft XDR suite.

• Microsoft certifications: AZ-400 (Microsoft Certified: DevOps Engineer Expert) and AZ-500 (Microsoft Certified: Azure Security Engineer Associate).

Package

• Competitive Market Salary £40k - £50k (experience dependent)

• 33 days annual leave allowance per year (25 days standard plus 8 bank holidays).

• Westfield Health Membership (offering cashback on health services plus discounts for retailers and gym memberships).

• Life Cover (2 x basic salary).

• Employer pension contribution (4% employer, 4% employee).

• Continual training and career development.

• Referral Scheme.

The successful candidate will be required to satisfy a right to work in the UK and Standard DBS check at conditional offer stage.

No agencies please.