Security Consultant

Integrity360

. Deliver end-to-end onboarding of client Microsoft Sentinel environments into the MSSP service .

Posted 10/14/2026full-timeDublin • IrelandMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in onboarding and configuring Microsoft Sentinel environments, including data connectors and analytics rules, while ensuring effective communication and collaboration with technical and non-technical stakeholders. Proficient in troubleshooting and optimizing data ingestion and security telemetry processes across various platforms.

Highest-signal resume keywords

Microsoft Sentinel ConfigurationKusto Query Language (KQL)Data Ingestion and TransformationMicrosoft Defender XDR IntegrationSIEM Operations and Detection Engineering

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Microsoft SentinelData Collection RulesLog Analytics WorkspacesAzure Monitor AgentCustom Log ParsersInfrastructure as CodeBicepTerraformPowerShellAzure CLI

Soft Skills

Written CommunicationVerbal CommunicationCollaborationIndependent Work ManagementProblem-Solving

Tools & Technologies

AzureAPIsSyslogCEFLogic AppsDevOps PipelinesChange ControlOperational RunbooksTechnical DocumentationClient Coordination

Certifications & Qualifications

Microsoft Certified: Security Operations Analyst Associate (SC-200)Microsoft Certified: Azure Security Engineer Associate (AZ-500/SC-500)Microsoft Certified: Cybersecurity Architect Expert (SC-100)

Industry Keywords

MSSPMDRSecurity Operations CentreManaged Security ServicesMITRE ATT&CK

Tech Stack

Tools & technologies

AzureCloudCyber SecurityTerraform

About the role

Key responsibilities & impact

Deliver end-to-end onboarding of client Microsoft Sentinel environments into the MSSP service
Configure Sentinel workspaces, content solutions, data connectors, analytics rules, automation rules, watchlists and workbooks
Run technical discovery sessions covering log sources, connectivity, data volumes, retention, dependencies and priorities
Onboard Microsoft, third-party, cloud, network, identity and application log sources using Azure Monitor Agent, Data Collection Rules, APIs, syslog, CEF and custom connectors
Design and implement data filtering and transformation to improve signal quality and control ingestion costs
Validate data ingestion, parsing, field mapping, timestamps, health and coverage; troubleshoot source, collector, network and Azure issues
Tune analytics rules, alert logic and incident generation with SOC and detection engineering teams
Onboard and integrate Microsoft Defender XDR workloads, including Defender for Endpoint, Defender for Identity, Defender for Office 365 and Defender for Cloud Apps
Produce high-level designs, implementation plans, configuration records, test evidence, operational runbooks and handover documentation
Coordinate with clients, project managers, architects, SOC analysts and service teams on dependencies, risks, actions and service-transition readiness
Apply engineering standards, peer review and change control; improve onboarding templates, technical patterns and internal procedures
Support troubleshooting and remediation during onboarding and early-life support
Undertake occasional travel for client delivery
Report to the Head of Cloud Security & Microsoft Security Services

Requirements

What you’ll need

Hands-on experience deploying, configuring or supporting Microsoft Sentinel in production or customer environments
Practical knowledge of Sentinel data connectors, Log Analytics workspaces, Azure Monitor Agent, Data Collection Rules, syslog and CEF collection patterns
Strong Kusto Query Language skills for data validation, troubleshooting, investigation and detection tuning
Experience onboarding and troubleshooting log sources across Microsoft 365, Azure, endpoints, identity, network, security and third-party platforms
Understanding of ingestion filtering, data transformation, parsing, normalisation, retention and security telemetry cost implications
Experience creating technical designs and delivery documentation, including HLDs, implementation plans, test records and operational handover materials
Working knowledge of Microsoft Defender XDR and integration of its workloads with Microsoft Sentinel
Understanding of SIEM operations, detection engineering principles, incident workflows and managed security service requirements
Strong troubleshooting skills across Azure, APIs, identity, networking and data collection components
Confident written and verbal communication skills with technical and non-technical client stakeholders
Ability to manage assigned work independently while collaborating with project, architecture, SOC and service teams
Experience working for an MSSP, MDR provider, Security Operations Centre or security-focused professional services team is desired
Experience with custom log parsers, KQL functions, ASIM-compatible content or other normalisation patterns is desired
Experience with DevOps pipelines, source control and detection as code is desired
Experience with infrastructure as code and automation using Bicep, ARM templates, Terraform, PowerShell, Azure CLI, Logic Apps or APIs is desired
Knowledge of Microsoft Sentinel repositories, content management and multi-customer deployment patterns is desired
Experience integrating Microsoft security services across tenants, subscriptions or delegated administration models such as Azure Lighthouse is desired
Familiarity with MITRE ATT&CK is desired
Desired qualifications include Microsoft Certified: Security Operations Analyst Associate (SC-200), Microsoft Certified: Azure Security Engineer Associate (AZ-500/SC-500), Microsoft Certified: Cybersecurity Architect Expert (SC-100), or relevant Microsoft Applied Skills

Benefits

Comp & perks

Learning, development and progression opportunities
Training and certification opportunities across Microsoft security technologies
Support from an experienced team