This is a contract position for a Microsoft Azure Cloud Sentinel Engineer to join a remote team (US-based). The engagement is for 6+ months and focuses on dedicated Sentinel SIEM/SOAR engineering, hybrid cloud security telemetry architecture, and Agile delivery.
Responsibilities
Design and implement strategy around segregating and managing telemetry between cloud and on-premises environments
Build and modify automated incident response playbooks using Azure Logic Apps
Develop custom KQL analytics within Microsoft Sentinel
Integrate Microsoft Sentinel directly with ServiceNow and Microsoft Defender XDR
Operate within an Agile sprint framework to manage backlogs, sprint tasks, and continuous deployment workflows
Serve as a Subject Matter Expert (SME) providing guidance on Sentinel SIEM/SOAR implementation and best practices
Qualifications
Required
5+ years of hands-on experience as a Microsoft Sentinel or Azure Security Subject Matter Expert
Demonstrated expertise building custom KQL analytics
Proven experience designing and deploying automated response playbooks in Azure Logic Apps
Experience integrating Sentinel with ServiceNow and Defender XDR
Hands-on experience ingesting, parsing, and managing security data streams between on-premises and Azure cloud environments
Prior experience working within an Agile or Scrum operational framework
Ability to pass an EFTPS (Electronic Federal Tax Payment System) background check
Show the full description
Preferred
Microsoft security certifications such as SC-200, AZ-500, or SC-100
Industry security certifications such as CISSP