Jobs → Engineering → Microsoft Sentinel Engineer / Architect

About the Role We are seeking a highly experienced Microsoft Sentinel Engineer / Architect to lead the design, implementation, optimization, and automation of enterprise security solutions. Key Responsibilities • Design and optimize Microsoft Sentinel SIEM architecture and deployments • Develop advanced KQL queries, analytics rules, workbooks, and threat-hunting solutions • Build SOAR playbooks using Azure Logic Apps and Azure Functions • Implement Azure security controls using Microsoft Defender, Entra ID, Conditional Access, and Azure Policy • Administer Microsoft Purview, including DLP and information protection • Develop security automation using Python, PowerShell, REST APIs, and webhooks • Implement Infrastructure as Code using Terraform, Bicep, or ARM templates • Manage security content and CI/CD pipelines using Git, Azure DevOps, or GitHub • Support security investigations, incident response, and MITRE ATT&CK-based detection engineering Requirements • 15+ years of experience in cloud security, information security, security architecture, or DevSecOps • 5+ years of hands-on Microsoft Sentinel engineering and architecture experience • Strong expertise in KQL, SIEM/SOAR, threat hunting, and detection engineering • Hands-on experience with Azure security, Microsoft Defender, Entra ID, and Microsoft Purview • Experience with Python, PowerShell, Logic Apps, Azure Functions, and Infrastructure as Code • Strong background in security incident investigation and enterprise security solutions Preferred Certifications • SC-200, SC-100, AZ-500, or equivalent Microsoft security certifications