SOC Engineer

Quzara LLC

. Lead technical onboarding of new customers from discovery and requirements through configuration, validation, and handoff .

Posted 10/10/2026full-timeUnited StatesMid-LevelSenior💰 $120,000 - $150,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in configuring and integrating Microsoft Sentinel, Defender XDR, and Entra ID, with a strong focus on onboarding security telemetry from diverse sources. Proficient in troubleshooting across various environments and producing technical documentation to support customer needs under compliance frameworks like FedRAMP and CMMC.

Highest-signal resume keywords

Microsoft Sentinel ConfigurationSecurity Telemetry OnboardingKQL ProficiencyPowerShell or Python ScriptingAZ-500 or SC-200 Certification

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Microsoft AzureMicrosoft SentinelDefender XDREntra IDSIEM PlatformsData-Source OnboardingTroubleshooting WindowsTroubleshooting LinuxNetworking SkillsAutomation Scripting

Soft Skills

Strong Written CommunicationCustomer-Facing Skills

Tools & Technologies

Microsoft SentinelSplunkSentinelOneIBM QRadarAzure MonitorLog AnalyticsAWSGoogle Cloud

Certifications & Qualifications

AZ-500SC-200SC-100AZ-104AZ-305SC-300SC-401MS-102AWS Certified Security – SpecialtyGoogle Professional Cloud Security Engineer

Industry Keywords

FedRAMPCMMCNISTMSSPMDRSecurity ConsultingGCCGCC HighEDRXDR

Tech Stack

Tools & technologies

AWSAzureCloudCyber SecurityLinuxPythonSplunk

About the role

Key responsibilities & impact

Lead technical onboarding of new customers from discovery and requirements through configuration, validation, and handoff
Configure and integrate Microsoft Sentinel, Defender XDR, and Entra ID with customer environments
Onboard and validate security telemetry from identity, endpoint, network, SaaS, and multi-cloud sources
Integrate and troubleshoot log sources across Microsoft Sentinel, Splunk, SentinelOne, and IBM QRadar
Troubleshoot ingestion and integration issues across cloud, identity, network, Windows, and Linux layers
Build automation and scripts to make onboarding and operations repeatable
Support customers operating under FedRAMP, CMMC, and NIST requirements
Produce technical documentation and work with customer stakeholders to resolve onboarding blockers
Perform other duties as assigned

Requirements

What you’ll need

U.S. Citizenship (Required)
Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field preferred, or equivalent experience
5+ years in IT infrastructure, cloud, or security engineering
3+ years of hands-on experience with Microsoft Azure
2+ years with Microsoft Sentinel or a comparable enterprise SIEM, including data-source onboarding
Strong working knowledge of Microsoft Sentinel, Defender XDR, Entra ID, Azure Monitor / Log Analytics, and multi-tenant delegated access (Azure Lighthouse, GDAP)
Hands-on experience onboarding data sources from Azure, AWS, and Google Workspace / Google Cloud
Experience with SIEM platforms such as Microsoft Sentinel, Splunk, SentinelOne, or IBM QRadar
Proficiency in KQL and PowerShell or Python
Troubleshooting skills across Windows, Linux, networking, and identity
Strong written and customer-facing communication skills
At least one current certification required: AZ-500 or SC-200
Preferred: MSSP, MDR, or security consulting experience; federal or defense-industrial-base customer support; GCC and GCC High experience; EDR/XDR platforms such as CrowdStrike or SentinelOne
Preferred certifications include SC-100, AZ-104, AZ-305, SC-300, SC-401, MS-102, AWS Certified Security – Specialty, Google Professional Cloud Security Engineer, Splunk Enterprise Security Certified Admin, IBM QRadar SIEM, SentinelOne, CrowdStrike Falcon (CCFA), CISSP, CCSP, CompTIA Security+ or CySA+, and GIAC certifications

Benefits

Comp & perks

Full-time salaried-exempt position
Remote work or on-site work flexibility, subject to client RTO policies
Monday–Friday schedule
Equal Employment Opportunity employer