FREE ACCESS
5,000–10,000 jobs/day
See all jobs on Scoutfield
Search thousands of fresh jobs every day.
Discover
- Fresh listings
- Fast filters
- No subscription required
Create a free account and start exploring right away.
Security Consultant
Integrity360. Deliver end-to-end onboarding of client Microsoft Sentinel environments into the MSSP service .
Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates expertise in deploying and configuring Microsoft Sentinel environments, including data connectors and analytics rules, while ensuring effective onboarding and integration with Microsoft Defender XDR. Proficient in technical documentation and collaboration with cross-functional teams to enhance security operations and incident management.
Highest-signal resume keywords
Microsoft Sentinel DeploymentKusto Query Language (KQL)Microsoft Defender XDR IntegrationTechnical Design DocumentationTroubleshooting Azure and APIs
ATS Keywords
Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
Microsoft SentinelData Collection RulesLog Analytics WorkspacesAzure Monitor AgentCustom Log ParsersIngestion FilteringData TransformationIncident WorkflowsDetection EngineeringAutomation Technologies
Soft Skills
Written CommunicationVerbal CommunicationIndependent WorkCollaboration
Tools & Technologies
AzureAPIsSyslogCEFDevOps Pipelines
Certifications & Qualifications
Microsoft Certified: Security Operations Analyst Associate (SC-200)Microsoft Certified: Azure Security Engineer Associate (AZ-500/SC-500)Microsoft Certified: Cybersecurity Architect Expert (SC-100)
Industry Keywords
MSSPMDR ProviderSecurity Operations CentreSIEM OperationsMITRE ATT&CK
Tech Stack
Tools & technologiesAzureCloudCyber Security
About the role
Key responsibilities & impact- Deliver end-to-end onboarding of client Microsoft Sentinel environments into the MSSP service
- Configure Sentinel workspaces, content solutions, data connectors, analytics rules, automation rules, watchlists and workbooks
- Run technical discovery sessions covering log sources, connectivity, data volumes, retention, dependencies and priorities
- Onboard Microsoft, third-party, cloud, network, identity and application log sources using Azure Monitor Agent, Data Collection Rules, APIs, syslog, CEF and custom connectors
- Design and implement data filtering and transformation to improve signal quality and control ingestion costs
- Validate ingestion, parsing, field mapping, timestamps, health and coverage; troubleshoot source, collector, network and Azure issues
- Tune analytics rules, alert logic and incident generation with SOC and detection engineering teams
- Onboard and integrate Microsoft Defender XDR workloads, including Defender for Endpoint, Defender for Identity, Defender for Office 365 and Defender for Cloud Apps
- Produce high-level designs, implementation plans, configuration records, test evidence, operational runbooks and handover documentation
- Coordinate with clients, project managers, architects, SOC analysts and service teams on dependencies, risks, actions and readiness
- Apply engineering standards, peer review and change control; improve onboarding templates, technical patterns and procedures
- Support troubleshooting and remediation during onboarding and early-life support
- Undertake occasional travel for client delivery
Requirements
What you’ll need- Hands-on experience deploying, configuring or supporting Microsoft Sentinel in production or customer environments
- Practical knowledge of Sentinel data connectors, Log Analytics workspaces, Azure Monitor Agent, Data Collection Rules, syslog and CEF collection patterns
- Strong Kusto Query Language skills
- Experience onboarding and troubleshooting log sources across Microsoft 365, Azure, endpoints, identity, network, security and third-party platforms
- Understanding of ingestion filtering, data transformation, parsing, normalisation, retention and security telemetry cost implications
- Experience creating technical designs and delivery documentation, including HLDs, implementation plans, test records and operational handover materials
- Working knowledge of Microsoft Defender XDR and integration with Microsoft Sentinel
- Understanding of SIEM operations, detection engineering, incident workflows and managed security service requirements
- Strong troubleshooting skills across Azure, APIs, identity, networking and data collection components
- Confident written and verbal communication skills with technical and non-technical client stakeholders
- Ability to manage assigned work independently while collaborating with project, architecture, SOC and service teams
- Experience working for an MSSP, MDR provider, Security Operations Centre or security-focused professional services team is desired
- Experience with custom log parsers, KQL functions, ASIM-compatible content or normalisation patterns is desired
- Experience with DevOps pipelines and source control for Microsoft Sentinel is desired
- Knowledge of detection as code, infrastructure as code and automation technologies is desired
- Familiarity with MITRE ATT&CK is desired
- Microsoft Certified: Security Operations Analyst Associate (SC-200) is desired
- Microsoft Certified: Azure Security Engineer Associate (AZ-500/SC-500) is desired
- Microsoft Certified: Cybersecurity Architect Expert (SC-100) is desired
- Relevant Microsoft Applied Skills or other security/cloud certifications are beneficial but not essential
Benefits
Comp & perks- Learning, development and progression opportunities
- Training and certification opportunities across Microsoft security technologies
- Support from an experienced team