jobapplier

Security Engineer

BlueVoyant

Skills

Required

  • SIEM
  • XDR
  • Azure
  • Microsoft Sentinel
  • cybersecurity
  • Microsoft Cloud Security technologies
  • KQL
  • PowerShell
  • Azure Cloud
  • Microsoft XDR
  • Zero Trust Architecture models
  • SQL
  • Python / C# / .NET

Preferred

  • Query Language
  • Kusto
  • Sentinel Analytic
  • Custom Detection Rules
  • EDR

Join BlueVoyant, a global cybersecurity company, as a Security Engineer II. In this fully remote role, you will lead client-facing SIEM and XDR technical enablement projects, focusing on Microsoft Cloud security technologies and SIEM platforms. You will be responsible for delivering Microsoft Sentinel and Defender implementations, creating new detection and reporting use cases, and leading XDR integration activities. You will also support client-facing environments and participate in research and development activities.

Responsibilities

  • Lead client-facing SIEM and XDR technical enablement projects, including hands-on deployment of Microsoft Security and Azure solutions.
  • Create and develop new detection, automation, and reporting use cases based on customer requirements, and define operational and executive security reports.
  • Participate in research and development activities to drive process improvement and new product and feature enhancements.
  • Hands-on experience deploying and/or managing Microsoft Defender security products (e.g., Defender for Endpoint, Identity, Cloud Apps, Office 365, Defender for Cloud)

Requirements

  • Strong experience with Azure Cloud technologies
  • Familiarity with Microsoft XDR and Zero Trust Architecture models

Hands-on experience deploying and/or managing Microsoft Sentinel

  • Knowledge of enterprise IT systems as they relate to cybersecurity
  • Excellent communication skills and the ability to thrive in a dynamic, fast-paced team environment
  • 5+ years of technical experience with Microsoft Cloud Security technologies or equivalent SIEM and XDR solutions
  • Hands-on engineering experience with SIEM and/or XDR technologies in production environments
  • Experience with query languages and/or script development (KQL, SPL, SQL, PowerShell, or similar)
  • Relevant Microsoft certifications (e.g., SC-200, AZ-500) are a plus
  • Bachelor's degree in a related field or equivalent professional experience and certifications
  • Expertise in Azure Logic Apps, Function Apps, and other Azure technologies
  • Incident investigation and response skills
  • Experience in customer-facing roles
  • Proficiency in Python, PowerShell, or C#/.NET
  • Proficiency in Linux configuration and common administration tasks

Preferred

  • Expertise in Kusto Query Language (KQL), including Sentinel Analytic Rules and Defender Custom Detection Rules
  • Experience with non-Microsoft SIEM or EDR tools