Senior Microsoft Sentinel & Defender MDR Engineer

EY; San Juan de Terranova; On-site; CAD 91,000 - 126,000; Full time

Benefits offered by this job

Support and coaching

Learning opportunities

Flexible work arrangements

Job summary

EY is seeking a senior Microsoft security engineer to design, implement, and improve Microsoft Sentinel-based MDR services for multi-tenant clients. You will architect detections, automate with Logic Apps, and onboard environments using Azure Lighthouse and Entra B2B.

You’ll work with clients and delivery teams, translating requirements into scalable security solutions, while driving production support and continuous improvements across the engagement.

Qualifications

• Bachelor’s degree or diploma in a related field or equivalent practical experience.
• Typically 7+ years of cybersecurity experience, including delivering Microsoft Sentinel and Defender engineering work.
• Experience in client-facing consulting, MSSP, MDR, or enterprise security engineering.

Responsibilities

• Lead the technical design and implementation of Microsoft Sentinel SIEM and SOAR solutions for MDR clients.
• Design workspace, data ingestion, retention, access-control, and multi-tenant operating models.
• Create analytics rules, hunting queries, parsers, and functions using KQL.
• Design and implement Azure Logic Apps playbooks and automation rules.
• Provide technical guidance and peer review to engineers and analysts.

Skills

Microsoft Sentinel

KQL

Defender XDR

Azure Logic Apps

Multi-tenant architecture

Education

Bachelor’s degree or diploma in CS/IT/Cybersecurity/Engineering

Tools

Azure Lighthouse

Entra B2B

Log Analytics

Data connectors

Job description

EY is seeking a senior Microsoft security engineer to design, implement, and improve Microsoft Sentinel-based MDR services for multi-tenant clients. You will architect detections, automate with Logic Apps, and onboard environments using Azure Lighthouse and Entra B2B.

You’ll work with clients and delivery teams, translating requirements into scalable security solutions, while driving production support and continuous improvements across the engagement.