{"id":2759238,"url":"https://alion.io/job/microsoft-security-consultant-secops-2","title":"Security Consultant Secops","company":{"id":18,"name":"Microsoft","domain":"microsoft.com","url":"https://alion.io/company/microsoft","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Eightfold","truth_index":{"grade":"B","score":79,"open_postings":279,"ghost_share":0,"stale_share":0.832,"repost_share":0,"time_to_fill_p50_days":28,"computed_at":"2026-10-22T06:10:10Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Hyderabad, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":19500,"max_usd":42000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":11},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Azure","optional":false},{"name":"Copilot","optional":false},{"name":"Human-in-the-Loop","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Defender for Cloud","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"PowerShell","optional":false},{"name":"SIEM","optional":false},{"name":"ITSM","optional":true}],"status":"live","first_seen_at":"2026-07-22T10:58:09Z","employer_posted_date":"2026-08-07","last_verified_at":"2026-10-22T12:42:34Z","board_verified":true,"closed_at":null,"days_open":92,"trust":{"level":"stale","repost_count":0,"flags":["stale"],"days_open":91},"description":"OverviewThe EAG Security Consultant - SecOps helps customers modernize security operations by designing, implementing, and operationalizing Microsoft Sentinel, Microsoft Defender XDR, Security Copilot, and agentic SOC capabilities. The role blends hands-on delivery, consulting judgment, automation, and customer-facing execution to improve detection, investigation, response, threat hunting, and operational resilience across hybrid and multi-cloud estates.\nResponsibilities\nLead SecOps discovery workshops, capture current-state SOC maturity, map detection, response, escalation, and operational gaps, and translate findings into pragmatic modernization roadmaps.\nDesign and implement Microsoft Sentinel architectures including data onboarding, analytics rules, automation playbooks, workbooks, incident enrichment, and operational reporting.\nOperationalize Microsoft Defender XDR workloads across endpoint, identity, cloud, email, and SaaS signals to improve alert fidelity, investigation depth, and response consistency.\nDevelop KQL hunting logic, incident triage workflows, response playbooks, and reusable delivery assets that reduce manual effort and improve analyst productivity.\nApply agentic SOC patterns using SOCBot / Autonomous SOC concepts, with clear human-in-the-loop approval, read/write separation, auditability, and safe automation guardrails.\nPartner with security architects, customer SOC leaders, product groups, and engineering teams to resolve delivery risks, validate design choices, and drive customer outcomes.\nSupport pre-sales and solution shaping through effort estimation, technical assumptions, discovery questions, solution narratives, and customer-facing demos.\nQualifications\nTechnical Depth Expected-\nSecOps delivery\nMicrosoft Sentinel, SIEM/SOAR modernization, Defender XDR, Microsoft Entra security, threat hunting, incident response, SOC operating model, playbooks, dashboards, and reporting.\nAutomation and AI\nSecurity Copilot usage, Azure AI Foundry awareness, Logic Apps, Azure Functions, PowerShell, KQL, APIs, managed identities, OAuth / OBO concepts, and automation safety controls.\nRequired/Minimum Qualifications\nConsulting and Delivery\nExecutive communication, discovery facilitation, architecture documentation, risk-based prioritization, stakeholder management, quality delivery, and reusable IP contribution.\nRequired Qualifications-\n5+ years of experience in cybersecurity consulting, security operations, SOC engineering, incident response, SIEM/SOAR, or related security delivery roles.\nHands-on experience with Microsoft Sentinel and at least two Defender workloads such as Defender for Endpoint, Defender for Identity, Defender for Cloud, Defender for Cloud Apps, or Defender for Office 365.\nStrong understanding of detection engineering, incident triage, threat hunting, investigation lifecycle, containment / remediation options, and SOC governance.\nAbility to produce high-quality customer-facing deliverables such as architecture documents, discovery outputs, deployment plans, design decisions, risk registers, and operational runbooks.\nWorking knowledge of KQL, Microsoft security logs, identity and endpoint signals, cloud security telemetry, and common attack techniques.\nExperience communicating complex security concepts to technical teams, program stakeholders, and executive audiences.\nDegree or equivalent experience in Computer Science, Engineering, Information Security, Cybersecurity, or a related discipline.\nAdditional or Preferred Qualifications\nAbility to identify repeatable delivery IP opportunities and convert project learnings into reusable accelerators, templates, workshops, and enablement materials.\nComfortable working across multi-cloud and hybrid customer environments, including ITSM, CMDB, ticketing, threat intelligence, and vulnerability management integrations.\nGrowth mindset to continuously learn EAG Security agent portfolio capabilities and position them in customer conversations and delivery engagements.\nThis position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled.\nMicrosoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances. If you need assistance with religious accommodations and/or a reasonable accommodation due to a disability during the application process, read more about requesting accommodations.","description_format":"text","description_chars":4889,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Console Games","Cloud Platforms (IaaS & PaaS)","Gaming Consoles","Developer Tools"],"lifecycle":[{"event":"open","at":"2026-10-17T02:14:05Z"}],"visa":[],"liveness":{"score":11,"band":"cold","label":"Long shot","p_open":1,"p_active":0.4,"p_room":0.28,"age_days":91,"expected_fill_days":28,"reasons":["conf:1","stale_co","velocity","win:tail","crowd:brand"],"computed_at":"2026-10-22T06:10:10Z"},"pay":null,"html_url":"https://alion.io/job/microsoft-security-consultant-secops-2","json_url":"https://alion.io/job/microsoft-security-consultant-secops-2.json","meta":{"generated_at":"2026-10-22T16:21:17Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":16594,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-23T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":18},"rest":"https://alion.io/mcp/rest/get_company?id=18"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fmicrosoft-security-consultant-secops-2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fmicrosoft-security-consultant-secops-2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fmicrosoft-security-consultant-secops-2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/microsoft-security-consultant-secops-2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fmicrosoft-security-consultant-secops-2"}]}