Jobs → Engineering → Microsoft Sentinel Engineer

About the Role We are looking for a Senior Microsoft Sentinel Engineer to lead the design, implementation, and automation of enterprise-grade security solutions. This is a 100% remote role supporting H1 candidates. Key Responsibilities • Own Microsoft Sentinel workspace architecture, data onboarding, normalization, and analytics • Build advanced detection rules using KQL, and engineer automated incident response workflows via SOAR, Logic Apps, and Azure Functions • Architect security controls across Azure, Microsoft Defender, and Microsoft Purview (DLP, sensitivity labels, compliance) • Manage security content using Infrastructure as Code (Terraform/Bicep) and CI/CD pipelines (Git, Azure DevOps, GitHub) Requirements • 10+ years in Cloud/Information Security Engineering, Architecture, or DevSecOps • 5+ years of hands-on Microsoft Sentinel experience (workspace design, KQL, custom analytics, threat hunting, playbooks) • Strong expertise in Python, PowerShell, REST APIs, and webhooks • Deep operational experience securing Microsoft Azure, Entra ID, and hybrid enterprise security tools (EDR, WAF, firewalls) Preferred Qualifications • Relevant Microsoft certifications (SC-200, SC-100, AZ-500) • Experience with Microsoft Defender XDR, MITRE ATT&CK, and Zero Trust frameworks