> Markdown version of [/jobs/ext/4605807-senior-security-analyst-microsoft](https://www.wearedevelopers.com/jobs/ext/4605807-senior-security-analyst-microsoft). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Senior Security Analyst - Microsoft

- **Company:** Katalyst Talent Agency
- **Location:** Redmond, WA, United States (Remote available)
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Microsoft Windows, Artificial Intelligence, Microsoft Azure, Cloud Computing, Intrusion Detection and Prevention, Microsoft Office, Microsoft Software, Windows PowerShell, Kusto Query Language, EndPointSecurity, Microsoft Power Automate, Mitre Att&ck, Microsoft Sentinel, Cyber Warfare
- **Published:** November 6, 2026
- **Apply:** https://www.careerbuilder.com/job-details/senior-security-analyst-microsoft-redmond-wa--32c6b865-0b79-468b-a27c-8d4c065a1007

## About the Role

Security Analysis, Microsoft Product Family, Security Analysis, Microsoft Product Family, Mentoring, Cloud Computing, Machine Tool, Artificial Intelligence (AI), Automation, Incident Response, Required:

 * [5+] years in a SOC, MDR, MSSP, or incident-response role, with demonstrable hands-on Microsoft Defender experience.
 * Deep, practical command of the Microsoft Defender suite - Defender for Endpoint, Identity, Office 365, and Cloud.
 * Strong Microsoft Sentinel skills, including fluent KQL for hunting and detection engineering.
 * Proven managed detection and response experience where you've led investigations through to resolution.
 * Working knowledge of the Microsoft 365 and Azure ecosystem and customer licensing (Business Premium, E3, E5, Defender P1/P2, etc.).
 * Clear communication and sound judgment under pressure, with a track record of mentoring others.
 * A drive to keep learning and to grow with the practice as it scales - we value this at every level.

Nice to have:

 * Detection-engineering or purple-team experience; MITRE ATT&CK fluency.
 * Automation and scripting depth (PowerShell, KQL, Logic Apps / Sentinel SOAR).
 * Experience helping stand up or scale a SOC or MSSP practice.

## Description

This is the top of our Security Analyst/Cyber Defense track. As a Senior Security Analyst, you're the person the team escalates to, who runs the hardest investigations, hunts for what the alerts miss, and owns the response when a real incident hits. You'll work deep in Microsoft Defender XDR and Microsoft Sentinel, building detection content and playbooks that make the whole operation sharper and more proactive.

You'll also set the technical bar. As we build a deep security practice, you'll mentor Tier 1 and Tier 2 analysts, shape how we implement, configure, detect and respond across our customer base, and help stand up the operations that our clients depend on. We take accountability for our customers' security posture and you'll be central to how we deliver on that.

Duties & Responsibilities

 * Lead complex investigations across endpoint, identity, email, and cloud as the escalation point for Tier 1 and Tier 2 analysts.
 * Leverage AI technologies and tooling to empower defenses with the latest capabilities for advanced reasoning and automation
 * Own incident response end to end: scope, contain, eradicate, recover, and lead post-incident reviews.
 * Run proactive threat hunts across customer environments using Microsoft threat intelligence and advanced hunting.
 * Engineer detections - author and tune Sentinel analytics rules, KQL queries, and SOAR/Logic App automation to raise signal and cut noise.
 * Build and maintain the runbooks, playbooks, and escalation paths that standardize how the SOC operates.
 * Mentor and upskill junior analysts with reviews, shadowing, and knowledge sharing.
 * Optimize the Defender and Sentinel deployment - coverage, configuration, and onboarding of new customer tenants.
 * Contribute to the operational maturity behind our Microsoft MXDR verification and SOC 2 readiness.