Microsoft Security Consultant

Microsoft Security Consultant - 6 Month Contract - Outside IR35 - Fully remote Contract Type: Initial 6 month contract (Outside IR35) Rate: £450 per day Outside IR35 Location: Fully Remote Role Overview We are looking for a Microsoft Security Consultant to join on a contract basis, bringing deep expertise across Microsoft Sentinel, Defender XDR, and Azure security. The role combines hands-on technical delivery with trusted advisory work - designing and implementing enterprise-grade detection and response architectures, driving Zero Trust initiatives, and translating complex security requirements into practical, scalable solutions. Key Responsibilities • Architect and deliver Microsoft Defender XDR solutions, running architecture and design workshops to define end-to-end security strategies aligned with Zero Trust and secure-by-design principles • Lead Microsoft Sentinel implementations including data connector configuration, KQL analytics rule development, Logic Apps playbook automation, and SIEM tuning to reduce false positives and improve MTTR • Assess and optimise client Defender XDR and Sentinel configurations, producing detailed remediation and maturity roadmaps aligned to Microsoft, CIS, NIST, and MITRE ATT&CK best practices • Advise on Defender XDR, Sentinel, and Entra ID integration to enable holistic security visibility, supporting migrations from Legacy SIEM platforms such as Splunk • Collaborate with SOC and Incident Response teams during escalated incidents, rapidly onboarding critical assets and integrating key data sources for containment and investigation Top 5 Skills • Deep hands-on expertise across Microsoft Defender XDR and Microsoft Sentinel - architecture, deployment, tuning, and optimisation across enterprise environments • Strong KQL development skills for analytics rules, data parsers, and detection engineering, with experience implementing Logic Apps playbooks for automated response workflows • Proven experience leading Splunk to Sentinel migrations, including data ingestion normalisation, ASIM alignment, and detection fidelity improvement • Knowledge of Zero Trust architecture, CIS, NIST, and MITRE ATT&CK frameworks, with the ability to produce security maturity roadmaps and architectural guidance for enterprise clients • Strong client-facing and advisory skills - experienced running workshops, mentoring engineers, and communicating complex security concepts to stakeholders across EMEA and North America