Microsoft Sentinel Security Engineer

This role is ideal for professionals with strong expertise in Microsoft Sentinel, SIEM/SOAR technologies, and cloud security, who are looking to work in a fully remote and collaborative environment.ResponsibilitiesDesign, implement, and maintain Microsoft Sentinel solutions.Develop and optimize analytics rules, workbooks, watchlists, and automation playbooks.Integrate security logs from cloud, on-premises, and third-party environments.Investigate security incidents and support threat detection and response activities.Fine-tune detection rules to reduce false positives and improve SOC efficiency.Collaborate with cybersecurity, infrastructure, and cloud teams to strengthen the organization’s security posture.Produce technical documentation and operational procedures.Support continuous improvement of security monitoring and incident response capabilities.RequirementsProven experience working with Microsoft Sentinel.Strong knowledge of SIEM and SOAR concepts.Experience with Microsoft Defender XDR and the Microsoft Security ecosystem.Hands-on experience with Kusto Query Language (KQL). Experience creating Analytics Rules, Workbooks, Automation Rules, and Playbooks.Knowledge of Microsoft Azure security services.Experience integrating multiple log sources into Sentinel.Understanding of incident response and threat detection methodologies.Excellent analytical and problem-solving skills.Ability to work independently in a remote international environment.Nice to HaveMicrosoft security certifications (SC-200, AZ-500, SC-100 or similar). Experience in SOC environments.Knowledge of Microsoft Defender for Cloud.Familiarity with Logic Apps and automation.Experience with MITRE ATT&CK framework.Scripting knowledge (PowerShell or Python).