Job Description

**What you’ll do*** **Build & tune Microsoft Sentinel:** data connectors, normalisation, analytics rules, UEBA, watchlists, workbooks and cost-savvy ingestion strategies.* **Orchestrate & automate:** create pragmatic SOAR playbooks (Logic Apps/Power Automate) that slash MTTR and remove toil.* **XDR in the real world:** deploy and optimise Microsoft Defender XDR across endpoints, identity, email and cloud; align detections to MITRE ATT&CK and real threats.* **Hunt & respond:** KQL-led threat hunting, incident triage guidance, detection content packs, purple-team style improvements.* **Secure the data:** advise on Purview information protection & DLP, from policy design to pilot and rollout.* **Make it land:** roadmaps, runbooks, and regular stakeholder updates — translating deep technical detail into business-ready outcomes.* **Coach & mentor:** guide junior consultants; share patterns, reusable content and lessons learned.* **Shape opportunities:** support presales scoping, proposals a...

Apply for this Position

Ready to join NCC Group? Click the button below to submit your application.

Submit Application