SIEM - Consultant
Summary
Consultant designs, deploys, and maintains Microsoft Sentinel and other SIEM/SOAR platforms for multiple clients, building detection rules, automation playbooks, and dashboards using KQL and Azure tooling.
This role is for you if you have the below
Educational qualifications
Bachelor’s degree in Information Technology or a related discipline (or equivalent work experience).
•
Work experience
•4+ years of experience working in an engineering role.
•3+ years of hands‑on experience with one or more SIEM/SOAR platforms:
•Microsoft Sentinel
•Azure Log Analytics
•Google Chronicle
•Siemplify
•Experience in end-to-end execution of MDR projects including planning, onboarding, delivery, and transition to steady state.
•Experience working in a shared service model supporting multiple clients for SIEM/SOAR use cases, Logic Apps, workbooks, and PowerBI reports.
•Strong experience with:
•Azure Log Analytics Workspaces
•Kusto Query Language (KQL)
•Logic Apps
•Workbooks & dashboard development
•Cloud security & networking concepts
•Experience with Azure DevOps toolset (Pipelines, Boards, Repos, Agent Pools).
•Experience with scalable SIEM/SOAR deployments.
The ideal candidate will:
•Support execution of client onboarding, implementation, and steady‑state support.
•Work across multiple clients to deliver SIEM/SOAR use cases, Logic Apps, custom workbooks, and PowerBI dashboards.
•Have hands-on exposure to Microsoft Sentinel or Google Chronicle/SecOps.
•Build analytics rules, automation playbooks, notebooks, incidents, and KQL queries.
•Possess strong understanding of Azure architecture including Azure AD, B2B, authentication patterns, Azure Lighthouse.
•Configure, automate, harden, and deploy Microsoft Sentinel services at scale.
•Integrate new technologies (e.g., Microsoft Defender for Endpoint, SentinelOne).
•Work with CI/CD, infrastructure as code (ARM templates), configuration management, and agile engineering practices.
•Demonstrate strong engineering mindset and cybersecurity domain knowledge.
•Work efficiently in fast-paced delivery environments.
This role is for you if you have the below
Educational qualifications
Bachelor’s degree in Information Technology or a related discipline (or equivalent work experience).
•
Work experience
•4+ years of experience working in an engineering role.
•3+ years of hands‑on experience with one or more SIEM/SOAR platforms:
•Microsoft Sentinel
•Azure Log Analytics
•Google Chronicle
•Siemplify
•Experience in end-to-end execution of MDR projects including planning, onboarding, delivery, and transition to steady state.
•Experience working in a shared service model supporting multiple clients for SIEM/SOAR use cases, Logic Apps, workbooks, and PowerBI reports.
•Strong experience with:
•Azure Log Analytics Workspaces
•Kusto Query Language (KQL)
•Logic Apps
•Workbooks & dashboard development
•Cloud security & networking concepts
•Experience with Azure DevOps toolset (Pipelines, Boards, Repos, Agent Pools).
•Experience with scalable SIEM/SOAR deployments.
The ideal candidate will:
•Support execution of client onboarding, implementation, and steady‑state support.
•Work across multiple clients to deliver SIEM/SOAR use cases, Logic Apps, custom workbooks, and PowerBI dashboards.
•Have hands-on exposure to Microsoft Sentinel or Google Chronicle/SecOps.
•Build analytics rules, automation playbooks, notebooks, incidents, and KQL queries.
•Possess strong understanding of Azure architecture including Azure AD, B2B, authentication patterns, Azure Lighthouse.
•Configure, automate, harden, and deploy Microsoft Sentinel services at scale.
•Integrate new technologies (e.g., Microsoft Defender for Endpoint, SentinelOne).
•Work with CI/CD, infrastructure as code (ARM templates), configuration management, and agile engineering practices.
•Demonstrate strong engineering mindset and cybersecurity domain knowledge.
•Work efficiently in fast-paced delivery environments.
This role is for you if you have the below
Educational qualifications
Bachelor’s degree in Information Technology or a related discipline (or equivalent work experience).
•
Work experience
•4+ years of experience working in an engineering role.
•3+ years of hands‑on experience with one or more SIEM/SOAR platforms:
•Microsoft Sentinel
•Azure Log Analytics
•Google Chronicle
•Siemplify
•Experience in end-to-end execution of MDR projects including planning, onboarding, delivery, and transition to steady state.
•Experience working in a shared service model supporting multiple clients for SIEM/SOAR use cases, Logic Apps, workbooks, and PowerBI reports.
•Strong experience with:
•Azure Log Analytics Workspaces
•Kusto Query Language (KQL)
•Logic Apps
•Workbooks & dashboard development
•Cloud security & networking concepts
•Experience with Azure DevOps toolset (Pipelines, Boards, Repos, Agent Pools).
•Experience with scalable SIEM/SOAR deployments.
The ideal candidate will:
•Support execution of client onboarding, implementation, and steady‑state support.
•Work across multiple clients to deliver SIEM/SOAR use cases, Logic Apps, custom workbooks, and PowerBI dashboards.
•Have hands-on exposure to Microsoft Sentinel or Google Chronicle/SecOps.
•Build analytics rules, automation playbooks, notebooks, incidents, and KQL queries.
•Possess strong understanding of Azure architecture including Azure AD, B2B, authentication patterns, Azure Lighthouse.
•Configure, automate, harden, and deploy Microsoft Sentinel services at scale.
•Integrate new technologies (e.g., Microsoft Defender for Endpoint, SentinelOne).
•Work with CI/CD, infrastructure as code (ARM templates), configuration management, and agile engineering practices.
•Demonstrate strong engineering mindset and cybersecurity domain knowledge.
•Work efficiently in fast-paced delivery environments.