Description

You will own security monitoring, analytics, and automation initiatives using Microsoft Sentinel in a regulated government environment.

This role is on-site.

Responsibilities

• Administer, configure, and optimize Microsoft Sentinel environments.
• Develop and tune security analytics rules, UEBA models, and anomaly detection logic.
• Build and maintain SOAR automation playbooks to streamline incident response.
• Integrate Sentinel with EDR, IAM, firewalls, and ticketing systems.
• Monitor and analyze security events, supporting compliance and audit requirements.

Required Skills

• 5+ years of experience in cybersecurity engineering, SIEM engineering, cloud engineering, or software development.
• Strong knowledge of security monitoring and incident response concepts.
• Experience with Microsoft Sentinel, SOAR, EDR, IAM, and firewalls.
• Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, or related field.
• Excellent communication and documentation skills.
• Ability to support after-hours security operations as needed.

Preferred Skills

• 3+ years hands-on experience with Microsoft Sentinel.
• Experience integrating Sentinel with EDR, IAM, firewalls, and ticketing systems.
• Experience with DevOps pipelines (GitHub, Azure DevOps) or prior government/regulated environment work.

Key Skills

Education

Any Graduate