Source description
About the role
Job Summary We are seeking an experienced Senior Security Engineer Microsoft Sentinel with deep expertise in SIEM/SOAR deployment, migration, and advanced security engineering. The ideal candidate will play a critical role in designing, implementing, and optimizing Microsoft Sentinel solutions, including custom integrations, automation, and AI-assisted security operations. Key Responsibilities - - Lead end-to-end deployment and migration of SIEM solutions to Microsoft Sentinel - Design, implement, and optimize SIEM and SOAR architectures within Microsoft Sentinel - Develop complex custom detection rules using advanced KQL (Kusto Query Language) - Build and maintain custom SOAR automation workflows using Logic Apps - Develop Codeless Connector Framework (CCF) solutions for integrating custom data sources and applications - Integrate SAP systems with Microsoft Sentinel and design custom detection use cases - Leverage Microsoft Security Copilot / GitHub Copilot for AI-assisted content creation during migration and optimization - Implement data ingestion pipelines using tools such as Logstash, NXLog, or similar technologies - Integrate logs into Microsoft Sentinel Data Lake for centralized analysis - Develop integrations for custom applications (e.g., Oracle Fusion) using APIs and Logic Apps - Create and manage Azure Function Apps for advanced data integration scenarios - Design and implement ASIM (Advanced Security Information Model) parsers Continuously improve detection coverage, automation, and response capabilities - Required Skills & Qualifications - - Solid hands-on experience with Microsoft Sentinel SIEM and SOAR - Proven experience in SIEM deployment and migration to Microsoft Sentinel - Advanced proficiency in KQL (Kusto Query Language) for detection engineering - Experience in building custom connectors and ingestion pipelines - Expertise in Logic Apps, Azure Functions, and API integrations - Hands-on experience with Logstash, NXLog, or equivalent data ingestion tools - Experience integrating enterprise applications (SAP, Oracle Fusion, etc.) with SIEM platforms - Strong understanding of ASIM architecture and parser development - Familiarity with Microsoft Security Copilot and Generative AI capabilities - Experience working with Microsoft Sentinel Data Lake and data architecture Preferred Qualifications - - Experience with cloud security (Azure Security stack) - Knowledge of threat detection, incident response, and security operations - Relevant certifications such as: - Microsoft Certified: Security Operations Analyst (SC-200) - Microsoft Certified: Azure Security Engineer (AZ-500) Job Summary We are seeking an experienced Senior Security Engineer Microsoft Sentinel with deep expertise in SIEM/SOAR deployment, migration, and advanced security engineering. The ideal candidate will play a critical role in designing, implementing, and optimizing Microsoft Sentinel solutions, including custom integrations, automation, and AI-assisted security operations. Key Responsibilities - - Lead end-to-end deployment and migration of SIEM solutions to Microsoft Sentinel - Design, implement, and optimize SIEM and SOAR architectures within Microsoft Sentinel - Develop complex custom detection rules using advanced KQL (Kusto Query Language) - Build and maintain custom SOAR automation workflows using Logic Apps - Develop Codeless Connector Framework (CCF) solutions for integrating custom data sources and applications - Integrate SAP systems with Microsoft Sentinel and design custom detection use cases - Leverage Microsoft Security Copilot / GitHub Copilot for AI-assisted content creation during migration and optimization - Implement data ingestion pipelines using tools such as Logstash, NXLog, or similar technologies - Integrate logs into Microsoft Sentinel Data Lake for centralized analysis - Develop integrations for custom applications (e.g., Oracle Fusion) using APIs and Logic Apps - Create and manage Azure Function Apps for advanced data integration scenarios - Design and implement ASIM (Advanced Security Information Model) parsers Continuously improve detection coverage, automation, and response capabilities - Required Skills & Qualifications - - Solid hands-on experience with Microsoft Sentinel SIEM and SOAR - Proven experience in SIEM deployment and migration to Microsoft Sentinel - Advanced proficiency in KQL (Kusto Query Language) for detection engineering - Experience in building custom connectors and ingestion pipelines - Expertise in Logic Apps, Azure Functions, and API integrations - Hands-on experience with Logstash, NXLog, or equivalent data ingestion tools - Experience integrating enterprise applications (SAP, Oracle Fusion, etc.) with SIEM platforms - Strong understanding of ASIM architecture and parser development - Familiarity with Microsoft Security Copilot and Generative AI capabilities - Experience working with Microsoft Senti
More at Paramount Computer Systems