Security Engineer

• Deliver end-to-end onboarding of client Microsoft Sentinel environments into the MSSP service
• Configure Sentinel workspaces, content solutions, data connectors, analytics rules, automation rules, watchlists and workbooks
• Run technical discovery sessions covering log sources, connectivity, data volumes, retention, dependencies and priorities
• Onboard Microsoft, third-party, cloud, network, identity and application log sources using Azure Monitor Agent, Data Collection Rules, APIs, syslog, CEF and custom connectors
• Design and implement data filtering and transformation to improve signal quality and control ingestion costs
• Validate ingestion, parsing, field mapping, timestamps, health and coverage; troubleshoot source, collector, network and Azure issues
• Tune analytics rules, alert logic and incident generation with SOC and detection engineering teams
• Onboard and integrate Microsoft Defender XDR workloads, including Defender for Endpoint, Defender for Identity, Defender for Office 365 and Defender for Cloud Apps
• Produce high-level designs, implementation plans, configuration records, test evidence, operational runbooks and handover documentation
• Coordinate with clients, project managers, architects, SOC analysts and service teams on dependencies, risks, actions and service transition readiness
• Apply engineering standards, peer review and change control; improve onboarding templates, technical patterns and internal procedures
• Support troubleshooting and remediation during onboarding and early-life support
• Undertake occasional travel where required for client delivery
• Manage assigned onboarding activities from discovery and design through implementation, testing, documentation and handover
• Report to the Head of Cloud Security & Microsoft Security Services

Explore Security Engineer at Integrity360. Review requirements and application details.