Description

You will lead the design, implementation, and optimization of Microsoft Sentinel security solutions for client environments.

This role is hybrid.

Responsibilities

• Design and deploy Microsoft Sentinel architectures tailored to specific customer requirements.
• Integrate cloud, on-premises, and third-party data sources to ensure unified visibility.
• Configure analysis rules, connectors, detection models, watch lists, and automate incident responses using Azure Logic Apps Playbooks.
• Optimize detection performance and reduce false positives by tuning security rules.
• Lead technical workshops, collaborate with customer teams, and act as the Subject Matter Expert for Sentinel projects.

Required Skills

• 5 to 8 years of experience in cybersecurity, including at least 3 years focused on Microsoft Azure security.
• Advanced expertise in Microsoft Sentinel, including KQL, UEBA, threat hunting, and SIEM/SOAR implementation.
• Proficiency in Microsoft Azure security tools including Microsoft Defender, Entra ID (Azure AD), IAM, NSG, and Azure Policy.
• Strong scripting skills in KQL, PowerShell, and Python.
• Hands-on experience with SOC operations, incident response, and SIEM/SOAR implementation.
• Deep understanding of cloud architectures (IaaS, PaaS, SaaS) and hybrid or multi-cloud environments.
• Solid knowledge of networking fundamentals including TCP/IP, VPN, firewalls, IDS/IPS, and EDR.

Preferred Skills

• Microsoft certifications: AZ-500, SC-200, or SC-100.
• Cybersecurity certifications: CISSP, CCSP, or SANS GSEC.

Key Skills

Education

Degree in computer science, cybersecurity