Microsoft Sentinel Engineer / Architect
Siva MUnited StatesSENIORPosted 10d ago
Cloud SecurityInfoSecSecurity ArchitectureDevSecOpsMicrosoft SentinelKQLAzure securityDefender for CloudAzure PolicyEntra IDConditional AccessNetworkingKey VaultLoggingMicrosoft PurviewDLPSensitivity labelsInformation protectionInsider riskAutomationREST APIsWebhooksConnectorsPythonPowerShellAzure Logic AppsAzure FunctionsTerraformBicepARMGitAzure DevOpsGitHubCI/CD pipelinesRBACSSOFirewallsAudit loggingAccess controlsSIEM/SOARIDS/IPSEndpoint protectionWAFVulnerability scanningLog managementMicrosoft certificationsMicrosoft Defender XDRDefender for Endpoint/Identity/Office 365Third-party SIEM/SOAR/EDR/IAM integrationMITRE ATT&CKThreat modelingDetection-as-codeZero Trust architecture
About the Role
We are looking for a Microsoft Sentinel Engineer / Architect to join our team. This role focuses on designing, deploying, and maintaining Microsoft Sentinel solutions for enterprise security.
Key Responsibilities
• Design and implement Microsoft Sentinel architecture
• Develop and maintain KQL analytics rules and threat hunting capabilities
• Integrate Microsoft Sentinel with various security tools and platforms
• Automate security processes using Azure Logic Apps and Functions
• Implement and manage Azure security controls and policies
Requirements
• 10+ years in Cloud Security, InfoSec, Security Architecture, or DevSecOps
• 5+ years hands-on experience with Microsoft Sentinel
• Advanced KQL proficiency for detection engineering and threat hunting
• Strong Azure security knowledge including Defender for Cloud and Azure Policy
• Experience with automation across Microsoft and non-Microsoft platforms
• Scripting skills in Python and PowerShell
• IaC experience with Terraform, Bicep, and/or ARM
• 5+ years network/cloud/system security experience
• 5+ years enterprise security technology experience
• 5+ years defending against advanced cyber threats
• 5+ years investigating security incidents and supporting incident response