Security Engineer II, Managed Microsoft Sentinel

You will be responsible for a critical engineering role within Cyderes' Managed Sentinel SIEM and MDR services, specifically focusing on Microsoft Sentinel & Defender XDR. Your main responsibilities will include detection engineering, platform optimization, onboarding lifecycle execution, and Defender XDR integration. You will serve as a trusted technical resource for clients, ensuring the configuration and improvement of their Microsoft security ecosystem to combat evolving threats. Additionally, you will represent and enhance the Cyderes brand through collaboration and delivery that meets client expectations. Your key responsibilities will include: - Supporting the intake process, including coverage for Eastern Standard Time business hours - Administering and maintaining Microsoft Sentinel and Defender XDR environments across managed clients - Monitoring health status of log ingestion pipelines, data connector status, automation strategies, and analytics rule performance - Onboarding new data sources into Microsoft Sentinel following established SOPs - Integrating Microsoft Defender data sources and validating data integrity and entity mapping - Developing analytics rules, tuning detection logic using KQL, reducing false positives, and mapping detections to MITRE ATT&CK framework - Maintaining dashboards, workbooks, and reporting artifacts - Performing Tier 2 assessment and investigation of escalated alerts - Providing clear documentation and escalation to MDR/SOC teams - Supporting cause investigations for platform or telemetry issues - Helping with containment automation and developing Azure Logic App guides - Automating response actions, following change management processes, and contributing to runbooks and standard operating procedures - Staying current on Microsoft security roadmap changes and participating in internal training and knowledge-sharing sessions Qualifications required: - Diploma or Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or related field (or equivalent experience) - 35 years of experience in IT security, SOC, or security engineering roles - Minimum 2 years hands-on experience with Microsoft Sentinel - Experience with Microsoft Defender XDR suite - Experience in MSSP or customer-facing environments - Exposure to multi-tenant environments (Azure Lighthouse) - Working knowledge of Microsoft Sentinel, Microsoft Defender XDR & Azure Log Analytics - Familiarity with MDR operational workflows - Certifications: SC-200 (Microsoft Security Operations Analyst), AZ-500 (Azure Security Engineer) You will be responsible for a critical engineering role within Cyderes' Managed Sentinel SIEM and MDR services, specifically focusing on Microsoft Sentinel & Defender XDR. Your main responsibilities will include detection engineering, platform optimization, onboarding lifecycle execution, and Defender XDR integration. You will serve as a trusted technical resource for clients, ensuring the configuration and improvement of their Microsoft security ecosystem to combat evolving threats. Additionally, you will represent and enhance the Cyderes brand through collaboration and delivery that meets client expectations. Your key responsibilities will include: - Supporting the intake process, including coverage for Eastern Standard Time business hours - Administering and maintaining Microsoft Sentinel and Defender XDR environments across managed clients - Monitoring health status of log ingestion pipelines, data connector status, automation strategies, and analytics rule performance - Onboarding new data sources into Microsoft Sentinel following established SOPs - Integrating Microsoft Defender data sources and validating data integrity and entity mapping - Developing analytics rules, tuning detection logic using KQL, reducing false positives, and mapping detections to MITRE ATT&CK framework - Maintaining dashboards, workbooks, and reporting artifacts - Performing Tier 2 assessment and investigation of escalated alerts - Providing clear documentation and escalation to MDR/SOC teams - Supporting cause investigations for platform or telemetry issues - Helping with containment automation and developing Azure Logic App guides - Automating response actions, following change management processes, and contributing to runbooks and standard operating procedures - Staying current on Microsoft security roadmap changes and participating in internal training and knowledge-sharing sessions Qualifications required: - Diploma or Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or related field (or equivalent experience) - 35 years of experience in IT security, SOC, or security engineering roles - Minimum 2 years hands-on experience with Microsoft Sentinel - Experience with Microsoft Defender XDR suite - Experience in MSSP or customer-facing environments - Exposure to multi-tenant environments (Azure Lighthouse) - Working knowledge of Microsoft Sentinel, Microso