Security Engineer II

<h3>Accountabilities</h3><li>
<strong>Lead security solution deployments:</strong>Design, architect, deploy, and optimize Microsoft Sentinel and Microsoft Defender solutions remotely, ensuring effective implementation and alignment with customer security requirements.</li><li>
<strong>Develop detection and automation capabilities:</strong>Create and enhance security detection rules, automated workflows, and reporting use cases tailored to customer environments and threat monitoring needs.</li><li>
<strong>Build security reporting and dashboards:</strong>Develop and support operational and executive-level dashboards and reports that provide meaningful insights into security posture, threats, and performance.</li><li>
<strong>Implement XDR integrations:</strong>Lead integrations across Microsoft and Azure security technologies, applying Microsoft Extended Detection and Response (XDR) principles and Zero Trust Architecture to strengthen protection across enterprise environments.</li><li>
<strong>Drive technical project delivery:</strong>Serve as the primary technical delivery resource within project teams, coordinating implementation activities and managing projects of varying complexity.</li><li>
<strong>Improve security operations:</strong>Support customer environments on an ongoing basis, helping enhance managed detection and response processes, maintain security capabilities, and improve operational maturity.</li><li>
<strong>Contribute to research and development:</strong>Explore emerging technologies, identify opportunities to improve engineering workflows, and support the development of new features, tools, and security capabilities.</li><li>
<strong>Collaborate with stakeholders:</strong>Work closely with customers and internal teams to understand technical requirements, communicate recommendations, resolve implementation challenges, and deliver effective security outcomes.</li><h2>Requirements</h2><li>
<strong>Professional experience:</strong>At least five years of technical experience with Microsoft Cloud Security technologies or equivalent SIEM and XDR solutions, including hands-on engineering experience in production environments.</li><li>
<strong>Microsoft Sentinel expertise:</strong>Practical experience deploying, configuring, managing, or optimizing Microsoft Sentinel in enterprise or customer environments.</li><li>
<strong>Microsoft Defender experience:</strong>Hands-on experience deploying or managing Microsoft Defender security products, such as Defender for Endpoint, Defender for Identity, Defender for Cloud Apps, Defender for Office 365, or Defender for Cloud.</li><li>
<strong>Azure Cloud proficiency:</strong>Strong knowledge of Azure cloud technologies and their application to cybersecurity engineering and enterprise security operations.</li><li>
<strong>Querying and scripting skills:</strong>Experience with query languages or scripting tools such as Kusto Query Language (KQL), SPL, SQL, or PowerShell.</li><li>
<strong>Cybersecurity fundamentals:</strong>Solid understanding of enterprise IT systems, security monitoring, threat detection, and the relationship between enterprise infrastructure and cybersecurity risks.</li><li>
<strong>Security architecture knowledge:</strong>Familiarity with Microsoft XDR concepts, Zero Trust Architecture, and the integration of security technologies across cloud and enterprise environments.</li><li>
<strong>Communication and collaboration:</strong>Excellent written and verbal communication skills, with the ability to explain technical concepts clearly and work effectively in a dynamic, fast-paced team environment.</li><li>
<strong>Education and certifications:</strong>A bachelor's degree in a relevant field or equivalent professional experience and certifications. Microsoft certifications such as SC-200 or AZ-500 are advantageous.</li><h2>Preferred qualifications:</h2><li>Advanced proficiency in KQL, including the development of Microsoft Sentinel analytics rules and Defender custom detection rules.</li><li>Experience with Azure Logic Apps, Azure Functions, and other cloud-based automation services.</li><li>Previous experience in customer-facing technical consulting, implementation, or security engineering roles.</li><li>Knowledge of incident investigation, threat analysis, and incident response procedures.</li><li>Programming or scripting proficiency in Python, PowerShell, or C#/.NET.</li><li>Familiarity with Linux configuration, administration, and troubleshooting.</li><li>Experience working with non-Microsoft SIEM or endpoint detection and response (EDR) platforms.</li><h2>Additional eligibility requirements:</h2><li>Must be a U.S. citizen and authorized to work in the United States.</li><li>Must be comfortable delivering remote technical implementations and collaborating with customers across different environments.</li><h2>Benefits</h2><li>
<strong>Competitive compensation:</strong>A competitive compensation package aligned with experience, technical expertise, and role responsibilities. A specific salary range was not provided in the original listing.</li><li>
<strong>Comprehensive benefits:</strong>Access to a benefits package designed to support employee health, financial security, and overall well-being.</li><li>
<strong>Remote work flexibility:</strong>Fully remote work arrangement within the United States.</li><li>
<strong>Professional development:</strong>Opportunities to deepen expertise in Microsoft Sentinel, Defender, Azure, cloud security, and advanced threat detection technologies.</li><li>
<strong>Technical ownership:</strong>Hands-on responsibility for security implementations that directly influence customer protection, threat detection, and incident response capabilities.</li><li>
<strong>Career growth:</strong>Exposure to complex enterprise security environments, cross-functional engineering projects, and research and development initiatives.</li><li>
<strong>Collaborative environment:</strong>Work alongside cybersecurity specialists and technical professionals focused on protecting organizations from evolving digital threats.</li><li>
<strong>Innovation and impact:</strong>Opportunities to contribute to new security features, improve deployment processes, and strengthen managed detection and response services.</li>