{"id":4028706,"url":"https://alion.io/job/matchtech-tenant-rationalisation-soc-assessment-detection-lead","title":"Tenant Rationalisation, SOC Assessment & Detection Lead","company":{"id":2073484,"name":"Matchtech","domain":"matchtech.com","url":"https://alion.io/company/matchtech-com","size_band":"201-500","is_staffing_agency":true,"employer_type":"agency","is_intermediary":false,"listed_via":null,"ats_vendor":"Schema","truth_index":{"grade":"A","score":100,"open_postings":38,"ghost_share":0,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":59,"computed_at":"2026-11-12T10:38:37Z"}},"role":"Security","role_family":"Security","seniority":"lead","employment_type":"contractor","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["London, United Kingdom"],"countries":["GB"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":600,"max":600,"currency":"GBP","period":"day","gross":null,"usd_annual":199750},"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Azure","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"SIEM","optional":false}],"status":"live","first_seen_at":"2026-11-10T17:50:04Z","employer_posted_date":"2026-11-10","last_verified_at":"2026-11-14T03:16:58Z","board_verified":true,"closed_at":null,"days_open":3,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":3},"description":"Tenant Rationalisation, SOC Assessment & Detection Lead\nSC Cleared | Outside IR35 (TBC) | Predominantly Remote\nWe're supporting a major security transformation programme and are looking for an experienced Tenant Rationalisation, SOC Assessment & Detection Lead to drive the implementation of Microsoft security recommendations across a complex enterprise environment. \nThis is a hands-on technical leadership role requiring deep expertise in Microsoft Sentinel, detection engineering, and SOC transformation. You'll be responsible for translating assessment outcomes into actionable remediation plans, leading delivery activity, and enhancing detection capabilities across multiple environments.\nKey Responsibilities\nLead delivery of tenant rationalisation and security remediation activities.\nDesign, build and optimise Microsoft Sentinel detections and analytics rules.\nDevelop and tune KQL queries to improve threat detection coverage.\nTranslate SOC assessment findings into a prioritised delivery backlog.\nCoordinate implementation activities across technical teams.\nValidate security improvements and ensure agreed acceptance criteria are met.\nSupport testing, stakeholder engagement and delivery governance.\nEssential Skills & Experience\nStrong commercial experience with Microsoft Sentinel.\nAdvanced KQL development and detection engineering expertise.\nExperience designing, building and tuning analytics rules and use cases.\nSecurity Operations Centre (SOC) delivery experience.\nAzure security and remediation experience.\nExperience working within complex or multi-tenant environments.\nProven ability to lead technical delivery whilst remaining hands-on.\nIdeal Background\nWe would particularly like to hear from:\nMicrosoft Sentinel Consultants\nSentinel Technical Leads\nDetection Engineering Leads\nSIEM/SOC Consultants\nMicrosoft Security Consultants\nCandidates should be able to demonstrate that they have personally built and deployed detections, rather than simply administering or monitoring a Sentinel environment.\nSecurity Requirements\nTo be considered, candidates must:\nHold active SC Clearance\nBe a sole British national\nBe willing to attend site when required (potentially up to one day per week)\nContract Details\nPredominantly remote\nInitial engagement until March, with strong likelihood of extension\nSite attendance may occasionally be required\nImmediate interviews available\nIf you're a hands-on Microsoft Sentinel expert with a strong background in detection engineering and SOC transformation, we'd love to hear from you.","description_format":"text","description_chars":2542,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Incident Response"],"lifecycle":[{"event":"open","at":"2026-11-10T17:50:04Z"}],"visa":[{"country":"GB","licensed_sponsor":false,"adverts_offering_sponsorship_24m":3,"sanctioned_now":false,"evidence":"Offered visa sponsorship in 3 of its adverts here in 24 months","filings_12m":null,"filings_prev_12m":null,"green_card_filings_12m":null,"median_offered_wage_usd":null,"route":null,"cap_exempt":false,"checked_at":"2026-11-13T08:07:55+00:00","sources":["Alion: sponsorship offered in the employer's own job adverts (24 months)"],"filings_for_role_12m":0}],"liveness":{"score":54,"band":"ok","label":"Likely open","p_open":1,"p_active":0.542,"p_room":1,"age_days":1,"expected_fill_days":59,"reasons":["conf:0","agency","velocity","win:early","comp:brand"],"computed_at":"2026-11-12T10:38:37Z"},"pay":{"stated_usd_annual":199750,"is_top_pay":false},"html_url":"https://alion.io/job/matchtech-tenant-rationalisation-soc-assessment-detection-lead","json_url":"https://alion.io/job/matchtech-tenant-rationalisation-soc-assessment-detection-lead.json","meta":{"generated_at":"2026-11-14T05:37:22Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":9469,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-15T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2073484},"rest":"https://alion.io/mcp/rest/get_company?id=2073484"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fmatchtech-tenant-rationalisation-soc-assessment-detection-lead"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"free","price":{"credits":0,"usd":0},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fmatchtech-tenant-rationalisation-soc-assessment-detection-lead"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fmatchtech-tenant-rationalisation-soc-assessment-detection-lead"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/matchtech-tenant-rationalisation-soc-assessment-detection-lead\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fmatchtech-tenant-rationalisation-soc-assessment-detection-lead"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4028706}},{"tool":"search_jobs","arguments":{"company":"matchtech.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4028706},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}