Security Engineer II - Sentinel

Role Summary:

The Security Engineer II will demonstrate the capacity to consistently meet and exceed client expectations representing and reinforcing the Cyderes brand through positive interaction with other teams within the company.  You will be a valued resource to our clients who are growing their security posture, the Senior Security Engineer will play a crucial role in the development of the Microsoft Sentinel SIEM service and will be involved with the onboarding and configuration lifecycle, to ensure customers stay on top of emerging security threats.

Responsibilities:

• Deploy and configure Microsoft Sentinel solutions for our customers, in support of enabling our vSOC services.
• Work on Cloud SIEM project implementations for various customers in different locations across the world (remotely), starting with deployment and Log Source Integrations.
• Generate supporting documentation (build books) on Sentinel solution, including logical diagrams and custom configurations, for use by our managed services group and clients.
• Interact with customers and technical service leads to understand their business challenges and desired outcomes.
• Maintain strong technical understanding and proficiency in Sentinel and associated technologies, such as EDR/MDR, Azure AD, and Azure policy configuration.
• Develop technical solutions to automate repeatable tasks, including Sentinel workbooks and logic apps.
• Utilize tools and analytical skills to investigate the root cause of issues across the technologies.
• Provide overall guidance and instructions to clients.
• Communicate effectively orally and in writing.
• Establish a cooperative working relationship with persons contacted while performing assigned duties.
• Guide engineering design, analysis, implementation, and support of security technologies.
• Research, design, and implement cyber security solutions.
• Drive the review and update of cyber security policies, architectures, and standards.
• Drive the responses to audits, penetration tests and vulnerability assessments.
• Conduct ongoing research around the threat landscape, including threat actors, TTPs and develop IR actions, investigation strategies and tooling.

Essential Skills & Experience:

• 3+ years of MS Sentinel Engineer experience.
• Proficient knowledge and experience with data collection, parsing, and normalization.
• Experience with common SIEM data collection technologies such as syslog.
• Extensive experience with KQL.
• Ensuring alerts generated by the SIEM are relevant/applicable to the customers environment.
• Liaising directly with customers for new use cases.
• Creating LogicApps and automated responses for security incidents.
• Experience with the other products in the Microsoft Security Suite – Endpoint, Identity, Purview, CloudApp, EASM, Mail 365.
• Understanding of the MITRE ATT&CK framework.
• Experience within a MSSP environment & customer facing.
• Microsoft Certifications: SC-200 & AZ-500