FREE ACCESS
5,000–10,000 jobs/day
See all jobs on Scoutfield
Search thousands of fresh jobs every day.
Discover
- Fresh listings
- Fast filters
- No subscription required
Create a free account and start exploring right away.
Security Engineer
Integrity360. Deliver end-to-end onboarding of client Microsoft Sentinel environments into the MSSP service .
Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates expertise in deploying and configuring Microsoft Sentinel environments, including data connectors and analytics rules, while ensuring effective onboarding and integration of security services. Proficient in Kusto Query Language for data validation and troubleshooting, with strong communication skills for collaboration with technical and non-technical stakeholders.
Highest-signal resume keywords
Microsoft Sentinel DeploymentKusto Query Language (KQL)Data Collection RulesMicrosoft Defender XDR IntegrationSIEM Operations
ATS Keywords
Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
Microsoft SentinelData ConnectorsLog Analytics WorkspacesAzure Monitor AgentData TransformationIngestion FilteringTechnical Design DocumentationTroubleshootingCustom Log ParsersDevOps Pipelines
Soft Skills
Written CommunicationVerbal CommunicationIndependent WorkCollaboration
Tools & Technologies
Azure CLIPowerShellLogic AppsBicepARM TemplatesAPIsSyslogCEF
Certifications & Qualifications
SC-200AZ-500SC-500SC-100
Industry Keywords
MSSPMDRSecurity Operations CentreDetection EngineeringMITRE ATT&CK
Tech Stack
Tools & technologiesAzureCloudTerraform
About the role
Key responsibilities & impact- Deliver end-to-end onboarding of client Microsoft Sentinel environments into the MSSP service
- Configure Sentinel workspaces, content solutions, data connectors, analytics rules, automation rules, watchlists and workbooks
- Run technical discovery sessions covering log sources, connectivity, data volumes, retention, dependencies and priorities
- Onboard Microsoft, third-party, cloud, network, identity and application log sources using Azure Monitor Agent, Data Collection Rules, APIs, syslog, CEF and custom connectors
- Design and implement data filtering and transformation to improve signal quality and control ingestion costs
- Validate ingestion, parsing, field mapping, timestamps, health and coverage, and troubleshoot issues across source systems and Azure services
- Tune analytics rules, alert logic and incident generation with SOC and detection engineering teams
- Onboard and integrate Microsoft Defender XDR workloads including Defender for Endpoint, Defender for Identity, Defender for Office 365 and Defender for Cloud Apps
- Produce high-level designs, implementation plans, configuration records, test evidence, operational runbooks and handover documentation
- Coordinate with clients, project managers, architects, SOC analysts and service teams on dependencies, risks, actions and service transition readiness
- Apply engineering standards, peer review and change control, and improve onboarding templates and internal procedures
- Support troubleshooting and remediation during onboarding and early-life support
- Undertake occasional travel for client delivery
Requirements
What you’ll need- Hands-on experience deploying, configuring or supporting Microsoft Sentinel in production or customer environments
- Practical knowledge of Sentinel data connectors, Log Analytics workspaces, Azure Monitor Agent, Data Collection Rules, syslog and CEF collection patterns
- Strong Kusto Query Language skills for data validation, troubleshooting, investigation and detection tuning
- Experience onboarding and troubleshooting log sources across Microsoft 365, Azure, endpoints, identity, network, security and third-party platforms
- Understanding of ingestion filtering, data transformation, parsing, normalisation, retention and security telemetry cost implications
- Experience creating technical designs and delivery documentation, including HLDs, implementation plans, test records and operational handover materials
- Working knowledge of Microsoft Defender XDR and integration of its workloads with Microsoft Sentinel
- Understanding of SIEM operations, detection engineering principles, incident workflows and managed security service requirements
- Strong troubleshooting skills across Azure, APIs, identity, networking and data collection components
- Confident written and verbal communication with technical and non-technical client stakeholders
- Ability to manage assigned work independently while collaborating with project, architecture, SOC and service teams
- Experience working for an MSSP, MDR provider, Security Operations Centre or security-focused professional services team (desired)
- Experience with custom log parsers, KQL functions, ASIM-compatible content or normalisation patterns (desired)
- Experience with DevOps pipelines and source control for Microsoft Sentinel content, configuration and deployment (desired)
- Knowledge of detection as code, infrastructure as code and automation technologies such as Bicep, ARM templates, Terraform, PowerShell, Azure CLI, Logic Apps or APIs (desired)
- Knowledge of Microsoft Sentinel repositories, content management and repeatable multi-customer deployment patterns (desired)
- Experience integrating Microsoft security services across tenants, subscriptions or delegated administration models such as Azure Lighthouse (desired)
- Familiarity with MITRE ATT&CK (desired)
- Microsoft security certifications such as SC-200, AZ-500/SC-500 or SC-100 are desired, not required
Benefits
Comp & perks- Learning, development and progression opportunities
- Training and certification opportunities across Microsoft security technologies
- Support from an experienced team
- Occasional travel to support client delivery