Job Description

Microsoft Security Consultant - 6 Month Contract - Outside IR35 - Fully remote

Contract Type: Initial 6 month contract (Outside IR35)

Rate: £450 per day Outside IR35

Location: Fully Remote

Role Overview

We are looking for a Microsoft Security Consultant to join on a contract basis, bringing deep expertise across Microsoft Sentinel, Defender XDR, and Azure security. The role combines hands-on technical delivery with trusted advisory work - designing and implementing enterprise-grade detection and response architectures, driving Zero Trust initiatives, and translating complex security requirements into practical, scalable solutions.

Key Responsibilities

• Architect and deliver Microsoft Defender XDR solutions, running architecture and design workshops to define end-to-end security strategies aligned with Zero Trust and secure-by-design principles
• Lead Microsoft Sentinel implementations including data connector configuration, KQL analytics rule development, Logic Apps playbook automation, and SIEM tuning to reduce false positives and improve MTTR
• Assess and optimise client Defender XDR and Sentinel configurations, producing detailed remediation and maturity roadmaps aligned to Microsoft, CIS, NIST, and MITRE ATT&CK best practices
• Advise on Defender XDR, Sentinel, and Entra ID integration to enable holistic security visibility, supporting migrations from Legacy SIEM platforms such as Splunk
• Collaborate with SOC and Incident Response teams during escalated incidents, rapidly onboarding critical assets and integrating key data sources for containment and investigation

Top 5 Skills

• Deep hands-on expertise across Microsoft Defender XDR and Microsoft Sentinel - architecture, deployment, tuning, and optimisation across enterprise environments
• Strong KQL development skills for analytics rules, data parsers, and detection engineering, with experience implementing Logic Apps playbooks for automated response workflows
• Proven experience leading Splunk to Sentinel migrations, including data ingestion normalisation, ASIM alignment, and detection fidelity improvement
• Knowledge of Zero Trust architecture, CIS, NIST, and MITRE ATT&CK frameworks, with the ability to produce security maturity roadmaps and architectural guidance for enterprise clients
• Strong client-facing and advisory skills - experienced running workshops, mentoring engineers, and communicating complex security concepts to stakeholders across EMEA and North America