Senior Microsoft Sentinel Engineer/Architect

Tasks

• Architect and optimize Microsoft Sentinel, including workspace design, data onboarding, analytics rules, and dashboards.
• Develop advanced KQL queries for threat hunting, detection engineering, and incident investigations.
• Build SOAR playbooks and automate security workflows using Azure Logic Apps and Azure Functions.
• Engineer Azure security solutions using Microsoft Defender for Cloud, Entra ID, Conditional Access, Azure Policy, and Key Vault.
• Implement Microsoft Purview security controls, including DLP, sensitivity labels, and insider risk management.
• Integrate Microsoft and third-party security platforms using REST APIs, webhooks, and custom connectors.
• Implement Infrastructure as Code and CI/CD practices for security content and automation.
• Support incident response, threat analysis, vulnerability management, and security operations improvement.

Requirements

• 10+ years of overall experience in Cloud Security, Information Security, Security Architecture, or DevSecOps.
• 5+ years of hands-on Microsoft Sentinel engineering and architecture experience.
• Advanced proficiency in KQL, SIEM/SOAR, detection engineering, and threat hunting.
• Strong Microsoft Azure security experience, including Defender for Cloud and Microsoft Entra ID.
• Hands-on Microsoft Purview experience with DLP, information protection, and compliance controls.
• Experience with Azure Logic Apps, Azure Functions, Python, and PowerShell.
• Infrastructure as Code: Terraform, Bicep, or ARM

Schedule

• Contract: C2C/W2
• Interview: Video

Location

• 100% Remote or Dallas, TX / Wilmington, DE