Microsoft Sentinel Detection Engineer (Hybrid)

Pathway Search LLC.; North Sydney Council; Hybrid; AUD 144,000 - 176,000; Full time

Benefits offered by this job

Hybrid working

Onsite three days a week

Job summary

Pathway Search LLC is seeking a Cyber Security Engineer for Detection Engineering (Microsoft Sentinel) in North Sydney. The role focuses on building and owning Microsoft Sentinel and Defender detection capabilities, not SOC triage, with collaboration across a managed SOC provider.

You will design analytics rules, write KQL queries, and improve coverage while reducing false positives across the security stack. Hybrid work with three days onsite. Australian work eligibility required.

Qualifications

• Hands-on experience building and tuning Sentinel analytics rules and Defender detections.
• Strong working knowledge of KQL and threat hunting techniques.
• Solid understanding of Windows log sources and telemetry routing to SIEM.

Responsibilities

• Design, build and tune Microsoft Sentinel analytics rules and Defender detections.
• Write and maintain KQL queries for threat hunting and detection logic.
• Improve platform coverage and reduce false positives across the Microsoft security stack.
• Collaborate with the managed SOC provider and own the detection logic they operate against.

Skills

Sentinel analytics

KQL

Defender detections

Windows logs

SOC collaboration

Tools

Microsoft Sentinel

Job description

Pathway Search LLC is seeking a Cyber Security Engineer for Detection Engineering (Microsoft Sentinel) in North Sydney. The role focuses on building and owning Microsoft Sentinel and Defender detection capabilities, not SOC triage, with collaboration across a managed SOC provider.

You will design analytics rules, write KQL queries, and improve coverage while reducing false positives across the security stack. Hybrid work with three days onsite. Australian work eligibility required.