Jobs → Engineering → Microsoft Sentinel Engineer

About the Role We are seeking a Microsoft Sentinel Engineer for a long-term remote position. This role requires extensive experience in cloud security and Microsoft Sentinel architecture. Key Responsibilities • Design and implement Microsoft Sentinel workspace architecture • Onboard and normalize data sources • Develop custom analytics rules and KQL queries • Perform threat hunting and investigation • Create workbooks and dashboards • Develop automation rules and SOAR playbooks • Secure Microsoft Azure environments • Implement and administer Microsoft Purview • Automate security processes across platforms • Integrate security platforms through APIs and custom automation • Develop and maintain security automation content Requirements • 10+ years of experience as a Cloud Security Engineer, Information Security Engineer, Security Architect, or DevSecOps Engineer • 5+ years of hands-on Microsoft Sentinel engineering and architecture experience • Advanced proficiency with Kusto Query Language (KQL) • Strong hands-on experience securing Microsoft Azure environments • Experience with Microsoft Purview, including DLP policies and information protection • Demonstrated experience automating security processes • Experience integrating security platforms through REST APIs, webhooks, and connectors • Strong scripting and development skills with Python and PowerShell • Hands-on experience with Azure Logic Apps and Azure Functions • Experience with Infrastructure as Code (Terraform, Bicep, ARM) • Experience managing security automation through Git, Azure DevOps, GitHub, and CI/CD pipelines