Microsoft Sentinel SIEM Engineer

Responsibilities:

• Configure and manage Microsoft Sentinel SIEM for enterprise security monitoring.
• Develop and maintain security detections, analytics rules, and KQL queries.
• Monitor security alerts and investigate security incidents.
• Perform threat hunting and support incident remediation activities.
• Build automation playbooks using Microsoft Sentinel and Logic Apps.
• Integrate security logs from Microsoft and third-party systems.
• Support PKI infrastructure including certificate monitoring and certificate lifecycle management.
• Monitor Active Directory Certificate Services (AD CS), Certificate Authorities, CRLs, and authentication events.
• Create dashboards, workbooks, and security reports.
• Collaborate with security and infrastructure teams to improve enterprise security.

Requirements:

• 5 years of experience supporting enterprise SIEM platforms.
• Hands-on experience with Microsoft Sentinel administration, monitoring, and detection engineering.
• Experience with KQL, analytics rules, and automation.
• PKI Engineering: Demonstrable understanding of PKI solution design and operations: enrollment protocols (SCEP, EST), Certificate Policy / Certification Practice Statement (CP/CPS), trusted roles, Levels of Assurance, NIST SP 800-63, and real use cases such as certificate-based authentication and software signing/validation.
• Knowledge of incident detection, investigation, and remediation.
• Experience with Microsoft Defender, Microsoft Entra ID, and cloud security.
• Strong troubleshooting, analytical, and communication skills.
• Nice to have: Hands-on AI/agentic security tooling (e.g., Claude / LLM-assisted code & configuration analysis, prompt engineering for security use cases)

Education:

• Bachelor's degree in Computer Science/Engineering or a related field