Sentinel Engineer

This is a fully remote position, open to applicants in Tennessee.

📋 Description

• Define, uphold, and communicate system requirements, solution strategies and designs, standards, and standardized methodologies throughout the organization.

• Architect and design Sentinel ingestion and integration frameworks, incorporating data connectors, workspace layout, and cross-tenant/Lighthouse considerations.

• Develop requirements, pinpoint gaps, and convert business needs into technical solutions.

• Identify opportunities for efficiency and automation, including SOAR playbooks via Logic Apps.

• Monitor progress and deliver relevant reporting.

• Serve as an escalation contact for customers and internal teams.

• Engage in identifying and evaluating use case implementations.

• Support and lead cybersecurity initiatives as needed.

• Process tickets and address and resolve platform issues for customers.

• Collaborate closely with clients, managed services, end-users, and management to implement, oversee, and enhance Microsoft Sentinel environments.

• Ensure project execution aligns with business processes, system architecture, and data management direction.

• Improve business processes and workflows associated with Microsoft Sentinel.

• Maintain assigned business documentation.

• Keep current on the latest security threats.

⛳️ Requirements

• Extensive experience in relevant IT security disciplines.

• Strong background in IT and IT Security.

• Experience in deploying and managing Microsoft Sentinel environments, including workspace architecture, data connectors, and content management.

• Foundational knowledge of networking principles, security best practices, and systems administration.

• 5 or more years of experience in security.

• Strong written and verbal communication skills.

• Proficiency in KQL (Kusto Query Language) is required.

• Familiarity with Python or other scripting languages is advantageous.

• Experience in writing Sentinel analytics rules, hunting queries, or similar detection logic.

• Excellent problem-solving abilities.

• Strong critical thinking and technical diagnostic skills.

• Ability to collaborate in project teams and complete individual tasks promptly.

• Personal accountability.

• Experience in coordinating events/meetings.

• Strong organizational skills.

• Demonstrated experience in Information Security domains, including knowledge of information security programs, organizations, requirements, deliverables, processes, tools, and mindset.

• Familiarity with the Microsoft security stack, including Defender XDR, Entra ID, and Microsoft 365 Defender, is a plus.

• Ability to maintain courteous and professional conduct.

• Travel may be required.

🏝️ Benefits

• Equal opportunity employer.

• Interview accommodations or adjustments available.

• Inclusive work environment that welcomes individuals from all backgrounds and perspectives.