SecOps Engineering Lead
- Location
- Abingdon, England, United Kingdom
health, shift and on‐call cover, escalation, and the runbooks the analysts work from. Administer SOC tooling: workspace and data connector health, ingestion and cost management, retention, and integration with Defender XDR, Defender for Cloud and Entra ID Protection. Own detection engineering: write and tune KQL analytics rules … leading a SOC function or detection engineering, and experience supervising or mentoring analysts. Hands‐on Microsoft Sentinel administration: workspace design, data connectors and ingestion cost control, retention, workbooks, automation rules and Logic Apps playbooks. Strong KQL and detection engineering: you can write, tune and defend an analytics rule ...