Security Engineer

Integrity360

. Deliver end-to-end onboarding of client Microsoft Sentinel environments into the MSSP service .

Posted 10/5/2026full-timeRemote • UkraineMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in onboarding and configuring Microsoft Sentinel environments, including data connectors and analytics rules, while ensuring effective communication with technical and non-technical stakeholders. Proficient in troubleshooting and optimizing security telemetry and incident workflows within managed security service frameworks.

Highest-signal resume keywords

Microsoft Sentinel ConfigurationKusto Query Language (KQL)Data Collection RulesMicrosoft Defender XDR IntegrationSIEM Operations

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Microsoft SentinelLog Analytics WorkspacesData FilteringData TransformationTechnical Design DocumentationCustom Log ParsersDevOps PipelinesAPIsIncident WorkflowsTroubleshooting

Soft Skills

Written CommunicationVerbal CommunicationCollaborationIndependent Work Management

Tools & Technologies

Azure Monitor AgentSyslogCEFMicrosoft 365Cloud Security

Certifications & Qualifications

Microsoft Certified: Security Operations Analyst Associate (SC-200)Microsoft Certified: Azure Security Engineer Associate (AZ-500/SC-500)Microsoft Certified: Cybersecurity Architect Expert (SC-100)

Industry Keywords

MSSPMDR ProviderSecurity Operations CentreDetection EngineeringMITRE ATT&CK

Tech Stack

Tools & technologies

AzureCloudCyber Security

About the role

Key responsibilities & impact

Deliver end-to-end onboarding of client Microsoft Sentinel environments into the MSSP service
Configure Sentinel workspaces, content solutions, data connectors, analytics rules, automation rules, watchlists and workbooks
Run technical discovery sessions covering log sources, connectivity, data volumes, retention, dependencies and priorities
Onboard Microsoft, third-party, cloud, network, identity and application log sources using Azure Monitor Agent, Data Collection Rules, APIs, syslog, CEF and custom connectors
Design and implement data filtering and transformation to improve signal quality and control ingestion costs
Validate ingestion, parsing, field mapping, timestamps, health and coverage; troubleshoot source, collector, network and Azure issues
Tune analytics rules, alert logic and incident generation with SOC and detection engineering teams
Onboard and integrate Microsoft Defender XDR workloads, including Defender for Endpoint, Defender for Identity, Defender for Office 365 and Defender for Cloud Apps
Produce high-level designs, implementation plans, configuration records, test evidence, operational runbooks and handover documentation
Coordinate with clients, project managers, architects, SOC analysts and service teams on dependencies, risks, actions and service transition readiness
Apply engineering standards, peer review and change control; improve onboarding templates, technical patterns and internal procedures
Support troubleshooting and remediation during onboarding and early-life support
Undertake occasional travel where required for client delivery
Manage assigned onboarding activities from discovery and design through implementation, testing, documentation and handover
Report to the Head of Cloud Security & Microsoft Security Services

Requirements

What you’ll need

Hands-on experience deploying, configuring or supporting Microsoft Sentinel in production or customer environments
Practical knowledge of Sentinel data connectors, Log Analytics workspaces, Azure Monitor Agent, Data Collection Rules, syslog and CEF collection patterns
Strong Kusto Query Language skills
Experience onboarding and troubleshooting log sources across Microsoft 365, Azure, endpoints, identity, network, security and third-party platforms
Understanding of ingestion filtering, data transformation, parsing, normalisation, retention and security telemetry costs
Experience creating technical designs and delivery documentation, including HLDs, implementation plans, test records and operational handover materials
Working knowledge of Microsoft Defender XDR and integration with Microsoft Sentinel
Understanding of SIEM operations, detection engineering, incident workflows and managed security service requirements
Strong troubleshooting skills across Azure, APIs, identity, networking and data collection components
Confident written and verbal communication skills with technical and non-technical client stakeholders
Ability to manage assigned work independently while collaborating with project, architecture, SOC and service teams
Experience working for an MSSP, MDR provider, Security Operations Centre or security-focused professional services team is desired
Experience with custom log parsers, KQL functions, ASIM-compatible content or normalisation patterns is desired
Experience with DevOps pipelines, source control, detection as code, infrastructure as code and automation is desired
Knowledge of Microsoft Sentinel repositories, content management and multi-customer deployment patterns is desired
Experience integrating Microsoft security services across tenants, subscriptions or delegated administration models is desired
Familiarity with MITRE ATT&CK is desired
Microsoft Certified: Security Operations Analyst Associate (SC-200) is desired
Microsoft Certified: Azure Security Engineer Associate (AZ-500/SC-500) is desired
Microsoft Certified: Cybersecurity Architect Expert (SC-100) is desired
Relevant Microsoft Applied Skills or other relevant security/cloud certifications are beneficial but not essential

Benefits

Comp & perks

Learning, development and progression opportunities
Training and certification opportunities across Microsoft security technologies
Support from an experienced team