Microsoft Sentinel Security Consultant & SOC Automation

Consult; Western Australia; On-site; AUD 120,000 - 160,000; Full time

Job summary

The Missing Link is seeking a Microsoft Sentinel Security Consultant to lead SIEM transformation and SOC automation in a Perth‑based role. You will act as the technical SME for workshops, drive deployment and optimisations, and support migration of SIEM capabilities to Microsoft Sentinel.

You will design modern security operations processes, develop analytics rules and playbooks, and enhance detection with UEBA and threat intelligence. Collaboration with stakeholders and ongoing runbooks are key.

Qualifications

• Extensive hands‑on experience with Microsoft Sentinel.
• Strong understanding of SIEM architecture, implementation and optimisation.
• Experience supporting SIEM migration and transformation initiatives.
• Advanced Kusto Query Language (KQL) skills.
• Experience developing Sentinel analytics rules, hunting queries, workbooks and automation playbooks.
• Strong understanding of SOC operations, incident response and threat hunting methodologies.
• Experience with Microsoft Defender XDR, Defender for Endpoint, Defender for Identity, Defender for Cloud and Microsoft Entra ID.
• Experience implementing UEBA, threat intelligence integrations and advanced detection use cases.
• Knowledge of Azure security services and cloud security concepts.
• Experience leveraging Logic Apps, PowerShell and security automation technologies.
• Excellent stakeholder engagement and presentation skills.
• Strong written and verbal communication skills.
• Experience with Microsoft Security Copilot.
• Experience implementing AI-assisted security operations workflows.
• Experience within enterprise or managed security environments.
• Microsoft certifications such as SC‑200, SC‑100, AZ‑500 or equivalent.
• Familiarity with frameworks including NIST, MITRE ATT&CK, ISO 27001 and Zero Trust.

Responsibilities

• Act as the Microsoft Sentinel technical SME for workshops, presentations and stakeholder engagements.
• Lead Microsoft Sentinel deployment, configuration and optimisation activities.
• Support the migration of SIEM capabilities from legacy platforms to Microsoft Sentinel.
• Design and implement modern security operations processes aligned to the Microsoft Security ecosystem.
• Develop, onboard, tune and operationalise Sentinel analytics rules, hunting queries, workbooks and use cases.
• Enhance threat detection capabilities through advanced analytics, UEBA, threat intelligence and data correlation.
• Design and implement automation and orchestration solutions using Sentinel playbooks and Logic Apps.
• Contribute to AI-driven SOC initiatives, including Microsoft Security Copilot integration and automation opportunities.
• Integrate Microsoft Sentinel with Microsoft Defender, Microsoft XDR, Entra ID and other security technologies.
• Support incident response, threat hunting and continuous improvement initiatives.
• Produce technical documentation, implementation guides and operational runbooks.
• Mentor SOC analysts and engineers through knowledge transfer and capability uplift activities.

Skills

Microsoft Sentinel

SIEM

KQL

Defender XDR

Automation Playbooks

UEBA

Threat Hunting

Azure Security

Logic Apps

PowerShell

Security Copilot

Tools

Logic Apps

PowerShell

KQL

Job description

The Missing Link is seeking a Microsoft Sentinel Security Consultant to lead SIEM transformation and SOC automation in a Perth‑based role. You will act as the technical SME for workshops, drive deployment and optimisations, and support migration of SIEM capabilities to Microsoft Sentinel.

You will design modern security operations processes, develop analytics rules and playbooks, and enhance detection with UEBA and threat intelligence. Collaboration with stakeholders and ongoing runbooks are key.