Senior Microsoft Sentinel & Defender MDR Engineer

EY; Calgary; On-site; CAD 91,000 - 126,000; Full time

Benefits offered by this job

Medical, prescription drug, and dental

Pension plan

Generous vacation policy

Firm paid days and holidays

Learning opportunities

Job summary

EY is seeking a senior, hands-on Microsoft security engineer to design and implement Microsoft Sentinel within our MDR services. You will work directly with clients and delivery teams to architect detections, automate with Logic Apps, and onboard environments using Azure Lighthouse and Entra B2B.

The role requires deep engineering experience, strong communication, and ownership from design to production support, with a focus on security operations and cross‑tenant collaboration.

Qualifications

• Seven or more years of cybersecurity experience, including Microsoft Sentinel and Defender engineering.
• Bachelor’s degree or diploma in computer science, IT, cybersecurity, or related field.
• Experience in client-facing consulting, MSSP, MDR, or enterprise security engineering.

Responsibilities

• Lead design and implementation of Microsoft Sentinel SIEM/SOAR for MDR clients.
• Design workspace, ingestion, retention, access control, and cost-aware models.
• Develop analytics rules, hunting queries, and workbooks in Sentinel.
• Automate incidents, triage, and playbooks with Azure Logic Apps.
• Onboard and operate customer environments using Azure Lighthouse and Entra B2B.

Skills

Microsoft Sentinel

KQL

Azure Defender XDR

Azure Logic Apps

Multi‑tenant onboarding

Client communication

Threat hunting

Incident response

Education

Bachelor’s degree or diploma in a related discipline

Seven+ years of cybersecurity experience

Tools

Azure Lighthouse

Microsoft Entra B2B

Log Analytics

Kusto Query Language (KQL)

Job description

EY is seeking a senior, hands-on Microsoft security engineer to design and implement Microsoft Sentinel within our MDR services. You will work directly with clients and delivery teams to architect detections, automate with Logic Apps, and onboard environments using Azure Lighthouse and Entra B2B.

The role requires deep engineering experience, strong communication, and ownership from design to production support, with a focus on security operations and cross‑tenant collaboration.