FREE ACCESS
5,000–10,000 jobs/day
See all jobs on Scoutfield
Search thousands of fresh jobs every day.
Discover
- Fresh listings
- Fast filters
- No subscription required
Create a free account and start exploring right away.
Security Engineer
Integrity360. Deliver end-to-end onboarding of client Microsoft Sentinel environments into the MSSP service .
Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates expertise in deploying and configuring Microsoft Sentinel environments, including data connectors and analytics rules, while ensuring effective onboarding and integration of security workloads. Proficient in Kusto Query Language for data validation and troubleshooting, with strong communication skills for collaboration with technical and non-technical stakeholders.
Highest-signal resume keywords
Microsoft Sentinel ConfigurationKusto Query Language (KQL)Microsoft Defender XDR IntegrationTechnical Design DocumentationTroubleshooting Across Azure Components
ATS Keywords
Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
Microsoft SentinelData Collection RulesLog Analytics WorkspacesAzure Monitor AgentIngestion FilteringData TransformationCustom Log ParsersDetection Engineering PrinciplesIncident WorkflowsAPIs
Soft Skills
Written CommunicationVerbal CommunicationIndependent Work ManagementCollaboration
Tools & Technologies
Azure CLIPowerShellTerraformBicepLogic Apps
Certifications & Qualifications
SC-200AZ-500SC-500SC-100
Industry Keywords
MSSPMDRSOCSecurity TelemetryMITRE ATT&CK
Tech Stack
Tools & technologiesAzureCloudTerraform
About the role
Key responsibilities & impact- Deliver end-to-end onboarding of client Microsoft Sentinel environments into the MSSP service
- Configure Sentinel workspaces, content solutions, data connectors, analytics rules, automation rules, watchlists and workbooks
- Run technical discovery sessions covering log sources, connectivity, data volumes, retention, dependencies and priorities
- Onboard Microsoft, third-party, cloud, network, identity and application log sources using Azure Monitor Agent, Data Collection Rules, APIs, syslog, CEF and custom connectors
- Design and implement data filtering and transformation to improve signal quality and control ingestion costs
- Validate ingestion, parsing, field mapping, timestamps, health and coverage; troubleshoot source, collector, network and Azure issues
- Tune analytics rules, alert logic and incident generation with SOC and detection engineering teams
- Onboard and integrate Microsoft Defender XDR workloads, including Defender for Endpoint, Defender for Identity, Defender for Office 365 and Defender for Cloud Apps
- Produce high-level designs, implementation plans, configuration records, test evidence, operational runbooks and handover documentation
- Coordinate with clients, project managers, architects, SOC analysts and service teams on dependencies, risks, actions and service transition readiness
- Apply engineering standards, peer review and change control; improve onboarding templates, technical patterns and procedures
- Support troubleshooting and remediation during onboarding and early-life support
- Undertake occasional travel for client delivery
- Report to the Head of Cloud Security & Microsoft Security Services
Requirements
What you’ll need- Hands-on experience deploying, configuring or supporting Microsoft Sentinel in production or customer environments
- Practical knowledge of Sentinel data connectors, Log Analytics workspaces, Azure Monitor Agent, Data Collection Rules, syslog and CEF collection patterns
- Strong Kusto Query Language skills for data validation, troubleshooting, investigation and detection tuning
- Experience onboarding and troubleshooting log sources across Microsoft 365, Azure, endpoints, identity, network, security and third-party platforms
- Understanding of ingestion filtering, data transformation, parsing, normalisation, retention and security telemetry cost implications
- Experience creating technical designs and delivery documentation, including HLDs, implementation plans, test records and operational handover materials
- Working knowledge of Microsoft Defender XDR and integration of its workloads with Microsoft Sentinel
- Understanding of SIEM operations, detection engineering principles, incident workflows and managed security service requirements
- Strong troubleshooting skills across Azure, APIs, identity, networking and data collection components
- Confident written and verbal communication skills with technical and non-technical client stakeholders
- Ability to manage assigned work independently while collaborating with project, architecture, SOC and service teams
- Desired: MSSP, MDR, SOC or security-focused professional services experience
- Desired: custom log parsers, KQL functions, ASIM-compatible content or normalisation patterns
- Desired: DevOps pipelines and source control for Microsoft Sentinel content
- Desired: detection as code, versioning, testing, peer review and controlled promotion
- Desired: infrastructure as code and automation using Bicep, ARM templates, Terraform, PowerShell, Azure CLI, Logic Apps or APIs
- Desired: Microsoft Sentinel repositories, content management and multi-customer deployment patterns
- Desired: Microsoft security services integration across tenants, subscriptions or delegated administration models such as Azure Lighthouse
- Desired: familiarity with MITRE ATT&CK
- Desired qualifications include SC-200, AZ-500/SC-500, SC-100, relevant Microsoft Applied Skills or other relevant security/cloud certifications
Benefits
Comp & perks- Learning, development and progression opportunities
- Training and certification opportunities across Microsoft security technologies
- Support from an experienced team