Role Summary The Senior Cybersecurity Engineer will be Responsible for engineering operating and optimizing Microsoft Sentinel SIEM and Defender XDR with focus on detection engineering threat hunting automation and endpoint security at enterprise scale
Key Responsibilities
Microsoft Sentinel SIEM Lead log source onboarding and Deploy tune and optimize analytics rules and detections aligned to MITRE ATTCK
Troubleshoot ingestion parsing and normalization issues to ensure continuous log flow
Perform Sentinel health and compliance checks
Knowledge on automation playbooks Logic Apps Azure function apps
Microsoft Defender XDR Manage onboarding and health of Windows Linux and macOS endpoints
Troubleshoot sensor health connectivity onboarding failures and policy issues
Perform EDR threat hunting Advanced Hunting KQL and support incident investigations
Monitor and remediate endpoint compliance gaps
Ensure security baselines support prevention compliance and stability
CrossPlatform Security Ownership
Working knowledge of Microsoft Defender stack MDO MDI MCAS MDC Entra ID Protection
Mentor junior engineers and own productlevel incidents including vendor escalation and RCA
Skills Experience
Robust handson experience with Microsoft Sentinel XDR Security Copilot
KQL knowledge SIEM Advanced Hunting Linux OS python
Experience with Syslog CEF APIs Azure monitoring and automation
Exposure to enterprisescale SOC detection engineering environments