Cyber Security Engineer

Cyber Security Engineer (Microsoft Security)

New York, NY (Hybrid) | Full-time | $145,000 – $185,000 + bonus

About our client

We’re partnering with a growing Managed Security Services Provider and Microsoft Solutions Partner for Security, based in New York City. They run a 24/7 security operations center and protect organizations across financial services, healthcare, legal and professional services, delivering managed detection and response, Microsoft security deployments and ongoing security engineering.

As they continue to grow their client base, they’re adding an experienced Cyber Security Engineer to their Microsoft security team.

The role

You’ll design, deploy and run Microsoft security platforms across a portfolio of client environments built on Microsoft Defender XDR, Microsoft Sentinel, Entra ID, Intune and Defender for Cloud.

You’ll work across several clients at once, lead new client onboardings, and act as the technical escalation point for SOC analysts. This role suits an engineer who enjoys variety, client contact and hands-on depth across the full Microsoft security stack.

What you’ll do

Platform engineering

• Deploy, configure and maintain Microsoft Sentinel across multiple client tenants, including data connectors, log ingestion and cost optimization.
• Manage client environments centrally through Azure Lighthouse and Defender XDR multi-tenant management.
• Deploy and tune Defender for Endpoint, Identity, Office 365, Cloud Apps and Cloud.

Detection and response

• Build and tune analytics rules and hunting queries in KQL, mapped to MITRE ATT&CK.
• Build automation with Logic Apps playbooks and Sentinel automation rules.
• Serve as the escalation point for SOC analysts and support incident response engagements.

Identity, endpoint and cloud hardening

• Implement Zero Trust controls, including Entra ID Conditional Access, PIM, MFA and Identity Protection.
• Deploy Intune compliance and configuration policies.
• Harden Microsoft 365 and Azure tenants using Secure Score and CIS Benchmarks.

Client delivery

• Lead technical onboarding for new clients, from discovery through go-live.
• Write runbooks, architecture documents and client-facing reports.
• Present findings and recommendations to client IT and security leaders.

What you’ll bring

• 4+ years in security engineering, SOC engineering or a related role.
• Hands-on production experience with Microsoft Sentinel and the Defender XDR suite.
• Strong KQL skills for detections, hunting and workbooks.
• Working knowledge of Entra ID, Conditional Access, PIM and Intune.
• Understanding of Azure networking and security controls (NSGs, Azure Firewall, Key Vault, Azure Policy).
• Scripting in PowerShell or Python.
• Familiarity with MITRE ATT&CK, NIST CSF and CIS Controls.
• Clear communication with both technical and non-technical audiences.

Nice to have

• Microsoft certifications: SC-200, AZ-500, SC-100 or SC-300.
• CISSP, GIAC (GCIH, GCDA) or CompTIA Security+.
• Previous MSSP, MDR or consulting experience.
• Azure Lighthouse, Bicep, ARM templates or Terraform.
• Experience in regulated sectors such as financial services (NYDFS Part 500), healthcare (HIPAA) or SOC 2 environments.

What’s on offer

• $145,000 – $185,000 base salary, plus annual performance bonus.
• Medical, dental and vision insurance.
• 401(k) with company match.
• Generous PTO plus paid holidays.
• Paid Microsoft and industry certifications, plus a yearly training budget.
• Hybrid working: 1 day a week in their Manhattan office.