Microsoft Sentinel Engineer - Part-Time - Remote

Global Solutions Group (GSG) is seeking a Junior Microsoft Sentinel Engineer to support an active client migration from a legacy cloud-based SIEM platform to Microsoft Sentinel. This role will work alongside a team of experienced security engineers and architects and will contribute to the deployment, tuning, and operationalization of Sentinel within the client’s environment.

This is an excellent opportunity for an early-career cybersecurity professional looking to gain hands-on experience with SIEM migration efforts, cloud-native security operations, detection engineering, and security automation.

The selected candidate will support a larger project team consisting of at least two additional security professionals and will assist with use case migration, data onboarding, rule development, and validation activities throughout the engagement, * Assist with the migration of security monitoring capabilities from a legacy SaaS SIEM platform into Microsoft Sentinel.

• Support onboarding and validation of data sources, connectors, and log ingestion pipelines.
• Help develop, tune, and maintain Sentinel Analytics Rules and detection logic.
• Assist with mapping alerts and detections to the MITRE ATT&CK framework.
• Participate in detection engineering activities, including use case conversion and tuning.
• Support the creation and testing of Microsoft Sentinel Workbooks, Dashboards, and Hunting Queries.
• Assist with implementation and maintenance of Logic Apps and Sentinel automation playbooks.
• Participate in troubleshooting data collection, alerting, and automation issues.
• Document migration activities, configurations, and operational procedures.
• Collaborate with senior engineers, architects, and client stakeholders throughout the migration effort.
• Support knowledge transfer activities and operational readiness efforts.

· 1-3 years of cybersecurity, SOC, SIEM, or security engineering experience.

· Experience with Microsoft Sentinel analytics rules, workbooks, and hunting queries.

· Exposure to detection engineering concepts and use case development.

· Basic understanding of SIEM concepts, log management, and security monitoring.

· Familiarity with Kusto Query Language (KQL).

· Understanding of common cybersecurity attack techniques and threat detection methodologies.

· Basic knowledge of Azure services and cloud security concepts.

· Ability to analyze security events and investigate alerts.

· Strong written and verbal communication skills.

· Ability to work effectively as part of a collaborative project team.

Preferred Qualifications

· Familiarity with the MITRE ATT&CK framework.

· Experience working with Logic Apps and security automation workflows.

· Knowledge of Microsoft Defender XDR, Azure Monitor, or related Microsoft security technologies.

· Previous SOC analyst experience.

· Exposure to SIEM migration projects or security platform implementations.

· Relevant certifications such as:

· Microsoft SC-200

· Microsoft AZ-900

· Microsoft SC-900

· CompTIA Security+