Siem Engineer

Role Summary
The Senior Cybersecurity Engineer will be Responsible for engineering operating and optimizing Microsoft Sentinel SIEM and Defender XDR with focus on detection engineering threat hunting automation and endpoint security at enterprise scale

Key Responsibilities
Microsoft Sentinel SIEM  Lead log source onboarding  and Deploy tune and optimize analytics rules and detections aligned to MITRE ATTCK
Troubleshoot ingestion parsing and normalization issues to ensure continuous log flow
Perform Sentinel health and compliance checks 
Knowledge on automation playbooks Logic Apps  Azure function apps

Microsoft Defender XDR  Manage onboarding and health of Windows Linux and macOS endpoints
Troubleshoot sensor health connectivity onboarding failures and policy issues
Perform EDR threat hunting Advanced Hunting   KQL and support incident investigations
Monitor and remediate endpoint compliance gaps
Ensure security baselines support prevention compliance and stability
CrossPlatform Security  Ownership
Working knowledge of Microsoft Defender stack MDO MDI MCAS MDC Entra ID Protection
Mentor junior engineers and own productlevel incidents including vendor escalation and RCA
Skills  Experience
Strong handson experience with Microsoft Sentinel  XDR Security Copilot
KQL knowledge SIEM  Advanced Hunting Linux OS python
Experience with Syslog CEF APIs Azure monitoring and automation
Exposure to enterprisescale SOC   detection engineering environments
Ownershipdriven and proactive approach
610 years of cybersecurity experience