Microsoft Azure Cloud Sentinel Engineer

This is a contract position for a Microsoft Azure Cloud Sentinel Engineer to join a remote team (US-based). The engagement is for 6+ months and focuses on dedicated Sentinel SIEM/SOAR engineering, hybrid cloud security telemetry architecture, and Agile delivery.

Responsibilities

• Design and implement strategy around segregating and managing telemetry between cloud and on-premises environments
• Build and modify automated incident response playbooks using Azure Logic Apps
• Develop custom KQL analytics within Microsoft Sentinel
• Integrate Microsoft Sentinel directly with ServiceNow and Microsoft Defender XDR
• Operate within an Agile sprint framework to manage backlogs, sprint tasks, and continuous deployment workflows
• Serve as a Subject Matter Expert (SME) providing guidance on Sentinel SIEM/SOAR implementation and best practices

Qualifications

• Required

• 5+ years of hands-on experience as a Microsoft Sentinel or Azure Security Subject Matter Expert

• Demonstrated expertise building custom KQL analytics

• Proven experience designing and deploying automated response playbooks in Azure Logic Apps

• Experience integrating Sentinel with ServiceNow and Defender XDR

• Hands-on experience ingesting, parsing, and managing security data streams between on-premises and Azure cloud environments

• Prior experience working within an Agile or Scrum operational framework

• Ability to pass an EFTPS (Electronic Federal Tax Payment System) background check

• Preferred

• Microsoft security certifications such as SC-200, AZ-500, or SC-100

• Industry security certifications such as CISSP