MXDR Security Engineer II

Skills
Cloud SecurityCybersecurityEthical HackingInformation SecurityKusto Query LanguagePenetration TestingSecurity Information And Event Management
Role

What the job involves

The main requirements, responsibilities and hiring steps.

Requirements

  • At least five years of technical experience with Microsoft Cloud Security technologies or other equivalent SIEM and XDR solutions
  • Strong experience with Azure Cloud technologies
  • Experience in query languages and/or script development (KQL, SPL, SQL, Powershell, etc.)
  • Knowledge and familiarity of enterprise IT systems in relation to cyber security.
  • Hands-on engineering experience with SIEM and/or XDR technologies
  • Excellent communication skills to work in a dynamic and fast-paced team environment

Nice to have

  • Hands-on Engineering experience with Microsoft Sentinel
  • Hands-on engineering experience of Microsoft Defender security
  • Experienced in customer-facing roles
  • Expertise in Kusto Query Language
  • Expertise in Azure Logic Apps, Function apps, and other Azure technologies
  • Incident investigation and response skill set
  • Proficient in Python, PowerShell or C#/.NET
  • Proficient in Linux configuration and common administration tasks

Day to day

  • Lead client facing SIEM and XDR technical enablement projects with hands-on deployment of Microsoft Security and Azure solutions
  • Work on Microsoft Sentinel and/or Defender project implementations for customers, including design, architecture, deployment, and use case tuning
  • Create and develop new detection, automation, and reporting use cases based on customer requirements
  • Define and assist in the creation of operational and executive security reports and dashboards
  • Participate in research and development activities aimed at process improvement and new product/feature enhancements
  • Engage in ongoing support activities for client-facing environments to mature and maintain MDR practices
  • Work on XDR integration activities across Microsoft and Azure product stacks with a familiarity with Microsoft XDR and Zero Trust Architecture models