Microsoft Sentinel Engineer
saihanisha reddyUnited StatesSENIORPosted 2h ago
Microsoft SentinelKQLLogic AppsAzure FunctionsAzure DefenderEntra IDKey VaultConditional AccessMicrosoft PurviewDLPPythonPowerShellREST APIsTerraformBicepARMGitAzure DevOpsGitHubCI/CD
About the Role
We are seeking a hands-on technical lead to design, build, and automate enterprise security solutions across a complex, multi-vendor environment.
Key Responsibilities
• Lead architecture, deployment & optimization of Microsoft Sentinel
• Build advanced detection capabilities, threat hunting queries & dashboards using KQL
• Develop SOAR playbooks with Logic Apps & Azure Functions
• Engineer security across Azure (Defender, Entra ID, Key Vault, Conditional Access)
• Implement Microsoft Purview (DLP, sensitivity labels, Insider Risk)
• Automate security processes end-to-end using Python, PowerShell, REST APIs & IaC (Terraform/Bicep/ARM)
• Manage security content via Git, Azure DevOps/GitHub & CI/CD pipelines
• Mentor security engineers & establish engineering best practices
Requirements
• 10+ years as a Cloud Security / Security / DevSecOps Engineer or Architect
• 5+ years hands-on Microsoft Sentinel engineering & architecture
• Advanced KQL expertise
• Strong Azure security, Microsoft Purview & SIEM/SOAR experience
• Proven automation & scripting (Python, PowerShell)
• Experience in a multi-vendor enterprise environment
• Automation-first security operating model