SC Cleared Azure Sentinel Cyber Security Engineer

Alexander Mann Solutions - Public Sector Resourcing • ATS • Cheshire, Warrington, United Kingdom • 3h ago

On behalf of Sellafield, we are looking for an Azure Sentinel Cyber Security Engineer (Inside IR35) for a 12 month contract based hybrid in Warrington - 2/3 days per week.

Work at Sellafield Ltd, and you're not just building a career. You're embarking on a mission. Joining 11,000 people on a 100-year project transforming the Sellafield site for all the generations that follow. We have the site at Sellafield (West Cumbria) and our office at Risley (near Warrington). Join us and you'll work shoulder-to-shoulder with industry-leading - sometimes world-leading - experts. There are generations and generations of knowledge here and people are only too willing to share it. Our culture of continuous improvement is underpinned by commitment to professional and personal development few can match. Our relentless pursuit of excellence is reflected in our health, safety, security, resilience, and environmental performance standards as well as the quality of the products and services we deliver to our customers.

SC Clearance is an essential requirement for this role, as a minimum you must be willing & eligible to undergo checks. Please note, due to the exceptional requirements of this position (short-term nature of this role and speed at which we require a postholder in situ) preference may be given to candidates who meet all of the essential criteria and hold active security clearance.

Accountabilities
. Subject Matter Expert (SME) for log source evaluation and onboarding into Azure Sentinel
. Review existing on-premises logging configurations and recommend improvements for cloud ingestion.
. Conduct discovery and assessment of log sources, ensuring appropriate classification and prioritisation.
. Collaborate with Head of Cyber Operations and other security stakeholders to ensure accurate, consistent logging across platforms.
. Deploy and configure native and custom data connectors to support diverse log source integration.
. Maintain a standardised process for log source categorisation, enrichment, and validation.

Deliverables
. Assess, categorise, and prioritise existing log sources for migration based on telemetry value and risk
. Coordinate connector deployment, workspace configuration, and diagnostic settings with platform teams
. Configure and validate native, Syslog, API, and custom ingestion paths as needed
. Ensure key log types (eg, Windows Security, Firewall, DNS, Proxy, AD, Identity) are onboarded and actionable
. Track onboarding progress and ingestion metrics using workbooks, dashboards, and reports
. Document log schemas, ingestion frequency, source ownership, and normalization mappings

Knowledge and Experience
. Experience with Microsoft Azure security technologies, especially Azure Sentinel, Log Analytics, and Azure Monitor
. Strong understanding of common log formats (Syslog, JSON, CEF, Windows Events, etc.)
. Familiarity with cloud migration strategies and hybrid logging environments
. Strong documentation skills and attention to detail
. Experience with security frameworks such as MITRE ATT&CK, NIST, and CAF
. Ability to troubleshoot complex ingestion or parsing issues and resolve at speed

Essential Skills
. Proven experience onboarding and managing log sources in Azure Sentinel
. Hands-on experience configuring data connectors and diagnostic settings in Azure
. Solid understanding of use case development and detection engineering
. Knowledge of PowerShell, KQL (Kusto Query Language), and JSON formatting
. Familiarity with identity-related logs (Azure AD, ADFS, M365 Defender, etc.)
. Experience working in a Security Operations environment or supporting SOC functions
. Understanding of network and host-based telemetry relevant for threat detection

Desirable
. Azure certifications (SC-200, AZ-500, MS-500)
. Experience with LogRhythm SIEM Platform
. Knowledge of SOAR tools and automation (Logic Apps, Sentinel Playbooks)

Please be aware that this role can only be worked within the UK and not Overseas.

Sellafield Ltd is committed to eliminating discrimination and encouraging diversity amongst its workforce.

Disability Confident

As a member of the Disability Confident Scheme, Sellafield guarantees to interview all candidates who have a disability and who meet all the essential criteria for the vacancy. In cases where we have a high volume of candidates who have a disability who meet all the essential criteria, we will interview the best candidates from within that group. This scheme encourages candidates with a disability and/or neurodivergence to apply. In exceptional circumstances, we may also need to apply the desirable criteria in our shortlisting process which may include holding active security clearance.

Armed Forces Covenant

Sellafield guarantees to interview veterans or spouses/partners of military personnel who meet all the essential criteria for the vacancy. In cases where we have a high volume of ex-military candidates/military spouses or partners, who meet all of the essential criteria, we will interview the best candidates from within that group. In exceptional circumstances, we may also need to apply the desirable criteria in our shortlisting process which may include holding active security clearance.

In applying for this role, you acknowledge the following "this role falls in scope of the Off Payroll Working in the Public Sector legislation. Any rates of payment quoted will reflect the gross rate per day for the assignment and will be subject to appropriate taxes and statutory costs. As such the payment to the intermediary and your income resulting from this contract will be different".

Related Jobs

Development and Production Test Engineer – Electronic / Electrical

Certain Advantage • Bolton, Greater Manchester, GB • £37 / hour • 3d ago

Engineer

World Class Defence Organisation based in Bolton, Lancashire is currently looking to recruit 5x Development and Production Test Engineer - Electronic/Electrical subcontractors on an initial 12 month contract. Hybrid wor...

3d ago

Apply

SC Cleared Server & Storage Engineer

Anglia IT Recruitment • TRAFFIC • Cheshire, Warrington, United Kingdom • 5d ago

Engineer

Role: SC Cleared Server & Storage Engineer Duration: 3 Months Location Warrington - Hybrid (3 days Remote) Rate: Market Rates Ref: DTJP We are seeking a highly skilled and versatile server & storage engineer. The...

5d ago

Apply

Workshop Engineer - Warrington

Crown Equipment Southeast Asia • TRAFFIC • Cheshire, Warrington, United Kingdom • 2w ago

Engineer

About Crown Lift Trucks Ltd Since its entry into the material handling industry in the 1960s, Crown Equipment Corporation has earned a reputation for exceptional product design, engineering and manufacturing of its award...

2w ago

Apply

Fibre Optic Engineering Review and Training Support - Bolton | Bolton, UK | Hybrid

Square One Resources • Bolton, England, GB • £75 - £76 / hour • 2w ago

Engineer

Job Title: Fibre Optic Engineering Review and Training Support - Bolton Location: Bolton Salary/Rate: £600 Daily Rate Start Date: 25/08/2025 Job Type: 3 Month Contract - Inside IR35 We are seeking a highly skilled and ve...

2w ago

Apply

Cloud Infrastructure Engineer

Experis UK • Knutsford, England, GB • 2w ago

Engineer

Role Title: Cloud Infrastructure Engineer Duration: 7 Months Location: Knutsford (Hybrid) Rate: £520 Per Day - Umbrella only Would you like to join a global leader in consulting, technology services and digital transform...

2w ago

Apply

Quality Assurance Engineer

Certain Advantage • Bolton, Greater Manchester, GB • £30 / hour • 2w ago

Engineer

World Class Defence Organisation based in Bolton (this role will be a split between Working From Home and Onsite) is currently looking to recruit a Quality Engineer subcontractor on an initial 6 month contract. Hourly R...

2w ago

Apply

Protection System Manager - C&I

Rolls Royce SMR Ltd. • TRAFFIC • Cheshire, Warrington, United Kingdom • 15h ago

We are Rolls-Royce SMR and we're doing something that's never been done before. We're revolutionising an industry. That's a once-in-a-career opportunity for those excited by such a challenge. This is more than just a job...

15h ago

Apply

Design Operations Manager

McGregor Boyall Associates Limited • TRAFFIC • Manchester, Salford, United Kingdom • 17h ago

Design Operations Manager London / Salford (hybrid) 6-months £500 per day via umbrella One of our public sector clients is looking for a Design Operations Manager to join their Accessibility team and help deliver inclusi...

17h ago

Apply

Principal Platform Architect - Microsoft

Seras UK • TRAFFIC • Cheshire, Widnes, United Kingdom • 2d ago

Architect

Principal Platform Architect - Microsoft Application Deadline: 2 September 2025 Department: Support Services Employment Type: Fixed Term Contract Location: Widnes Description We're looking for an expert to lead the desig...

2d ago

Apply

Security Logging and monitoring specialist

Experis UK • Knutsford, England, GB • 3d ago

Role Title: Security Logging and Monitoring Specialist Duration: contract to run until 31/12/2025 Location: Knutsford, hybrid 2/3 days onsite Rate: up to £340.40 p/d Umbrella inside IR35 Role purpose / summary You will a...

3d ago

Apply