The Engineer Lead will focus on end-to-end MDR project execution, leading teams to deliver SIEM and SOAR use cases, log analytics, and reports. This role requires strong Azure development experience, security expertise, and Agile/DevOps skills. The role involves demonstrating to clients, providing strategic plans, and driving automation projects.
Requirements
- Strong background developing Microsoft Sentinel analytics rules, incidents, playbooks, notebooks, workbooks, and threat hunting within the Azure Cloud.
- Strong and demonstrated background working with Log Analytics Workspaces, Kusto Query Language, and Dashboard/workbook development.
- Very strong experience with Logic Apps in Azure.
- Experience with SIEM and SOAR solutions at scale.
- Understanding of Azure Lighthouse, Azure AD, B2B, and common Cloud authentication patterns.
- Ability to configure, automate, harden, and deploy Microsoft Sentinel Services.
- Understanding of DevOps practices including CICD, Pipelines, Configuration Management, IaC, ARM templates, GIT, Azure Automation.
- Strong Understanding of the Microsoft Suite & ability to provide guidance & consultation in line with best security practices
- Hands-on knowledge on Power Platforms (PowerBI, Power Apps) is an advantage