We are seeking an experienced Microsoft Sentinel Lead / Senior Security Operations Engineer to drive the design, deployment, optimization, and operation of enterprise-scale SIEM and SOC solutions. The ideal candidate will possess deep expertise in Microsoft Sentinel, Azure Security, Detection Engineering, SOAR Automation, and Security Operations, with the ability to lead incident response, stakeholder engagements, and complex security integrations.

 

SIEM & Security Operations

• Lead the architecture, implementation, and management of large-scale Microsoft Sentinel environments.
• Support complex hybrid architectures across multi-cloud, on-premises, multi-tenant, and multi-subscription environments.
• Ensure SIEM platform health, log ingestion, connector performance, and overall operational excellence.
• Drive SOC maturity through detection tuning, dashboard optimization, and automation initiatives.
• Lead major incident investigations, root cause analysis, and escalation management.
• Act as the primary escalation point for L1/L2 analysts and support BAU SOC operations.
• Manage ITSM ticket lifecycle and ensure adherence to SLA metrics (TTD, TTR, MTTR).
• Contribute to governance, reporting, and security review activities.

Security Engineering & Detection

• Provide advanced expertise in Microsoft Azure security architecture and integrations.
• Onboard and integrate log sources from Windows/Linux endpoints, network devices, security appliances, and SaaS platforms.
• Design and optimize MITRE ATT&CK-aligned detection use cases and analytics rules.
• Leverage Microsoft Defender XDR technologies to enhance threat detection and response capabilities.
• Develop operational dashboards and executive-level security reports.