Senior Security Engineer – Microsoft Sentinel

Job Summary

We are seeking an experienced Senior Security Engineer - Microsoft Sentinel with deep expertise in SIEM/SOAR deployment, migration, and advanced security engineering. The ideal candidate will play a critical role in designing, implementing, and optimizing Microsoft Sentinel solutions, including custom integrations, automation, and AI-assisted security operations.

Key Responsibilities

• • Lead end-to-end deployment and migration of SIEM solutions to Microsoft Sentinel
  • Design, implement, and optimize SIEM and SOAR architectures within Microsoft Sentinel
  • Develop complex custom detection rules using advanced KQL (Kusto Query Language)
  • Build and maintain custom SOAR automation workflows using Logic Apps
  • Develop Codeless Connector Framework (CCF) solutions for integrating custom data sources and applications
  • Integrate SAP systems with Microsoft Sentinel and design custom detection use cases
  • Leverage Microsoft Security Copilot / GitHub Copilot for AI-assisted content creation during migration and optimization
  • Implement data ingestion pipelines using tools such as Logstash, NXLog, or similar technologies
  • Integrate logs into Microsoft Sentinel Data Lake for centralized analysis
  • Develop integrations for custom applications (e.g., Oracle Fusion) using APIs and Logic Apps
  • Create and manage Azure Function Apps for advanced data integration scenarios
  • Design and implement ASIM (Advanced Security Information Model) parsers
  • Continuously improve detection coverage, automation, and response capabilities

Required Skills & Qualifications

• • Strong hands-on experience with Microsoft Sentinel SIEM and SOAR
  • Proven experience in SIEM deployment and migration to Microsoft Sentinel
  • Advanced proficiency in KQL (Kusto Query Language) for detection engineering
  • Experience in building custom connectors and ingestion pipelines
  • Expertise in Logic Apps, Azure Functions, and API integrations
  • Hands-on experience with Logstash, NXLog, or equivalent data ingestion tools
  • Experience integrating enterprise applications (SAP, Oracle Fusion, etc.) with SIEM platforms
  • Strong understanding of ASIM architecture and parser development
  • Familiarity with Microsoft Security Copilot and Generative AI capabilities
  • Experience working with Microsoft Sentinel Data Lake and data architecture

Preferred Qualifications

• • Experience with cloud security (Azure Security stack)
  • Knowledge of threat detection, incident response, and security operations
  • Relevant certifications such as:
  • Microsoft Certified: Security Operations Analyst (SC-200)
  • Microsoft Certified: Azure Security Engineer (AZ-500)