Microsoft Sentinel Engineer / Architect
Arshad MajidUnited StatesSENIORPosted 2h ago
Microsoft SentinelKQLAzure SecurityMicrosoft PurviewSIEMSOARAutomation RulesAzure Logic AppsAzure FunctionsMicrosoft Defender XDRMicrosoft Entra IDPythonPowerShellTerraformBicepARM TemplatesREST APIsWebhooksCI/CD Pipelines
About the Role
We are looking for a highly experienced Microsoft Sentinel Engineer / Architect for a major enterprise security initiative. This is not a general security engineer role but requires true Microsoft Sentinel SME / Architect expertise.
Key Responsibilities
• Design, engineer, optimize, and automate Microsoft Sentinel environments
• Develop custom analytics rules and threat hunting capabilities
• Implement SIEM / SOAR architecture and engineering solutions
• Create Sentinel automation rules and SOAR playbooks
• Troubleshoot log ingestion, data connectors, and log-drop alerts
Requirements
• 5+ Years of Microsoft Sentinel Engineering / Architecture experience
• Advanced KQL skills for custom analytics rules, threat hunting, and detection engineering
• Microsoft Azure Security and Cloud Security Architecture expertise
• Microsoft Purview knowledge including DLP, Sensitivity Labels, and Information Protection
• SIEM / SOAR Architecture and Engineering experience
• Experience with Azure Logic Apps and Azure Functions
• Microsoft Defender XDR / Defender for Cloud knowledge
• Microsoft Entra ID, RBAC, and Conditional Access experience
• Python and PowerShell scripting skills
• Terraform / Bicep / ARM Templates expertise
• REST APIs, Webhooks, and Security Integrations experience
• GitHub / Azure DevOps / CI/CD Pipelines experience