Senior Microsoft Sentinel & Defender MDR Engineer

EY; Winnipeg; On-site; CAD 91,000 - 126,000; Full time

Benefits offered by this job

Medical coverage

Pension plan

Vacation policy

Firm paid days

Learning opportunities

Flexible work

Coaching

Job summary

EY is seeking a senior, hands-on Microsoft security engineer to design, implement, and continuously improve MDR services using Microsoft Sentinel and Defender technologies. You will work directly with clients and delivery teams to architect detections, automate with Logic Apps, and onboard environments via Azure Lighthouse and Entra B2B.

The role requires deep engineering experience, strong client communication, and ownership from design through production support in a fast-paced, enterprise

Qualifications

• Seven or more years of cybersecurity experience.
• Experience delivering Microsoft Sentinel and Defender engineering work.
• Strong experience with Defender XDR across endpoints and cloud.

Responsibilities

• As a senior MDR engineer, lead the design and implementation of Microsoft Sentinel SIEM and SOAR for MDR clients.
• Design workspace, data ingestion, retention, access-control, and multi-tenant models.
• Configure Sentinel in Defender portal, Log Analytics, data connectors, and related resources.
• Develop analytics rules, hunting queries, parsers, and functions using KQL.
• Translate threat scenarios into practical detection use cases mapped to MITRE ATT&CK.
• Automate incident enrichment, triage, containment, and remediation across systems.
• Onboard and operate multi-tenant environments with Azure Lighthouse and Entra B2B.
• Provide senior technical support, lead workshops, and deliver runbooks and designs.

Skills

Microsoft Sentinel

Kusto Query Language (KQL)

Azure Logic Apps

Microsoft Defender XDR

Azure Lighthouse

Entra B2B

Threat hunting

Incident response

Client communication

Education

Bachelor’s degree or diploma in CS/IT/cybersecurity/engineering

Tools

Log Analytics

Workbooks

Azure DevOps

Job description

EY is seeking a senior, hands-on Microsoft security engineer to design, implement, and continuously improve MDR services using Microsoft Sentinel and Defender technologies. You will work directly with clients and delivery teams to architect detections, automate with Logic Apps, and onboard environments via Azure Lighthouse and Entra B2B.

The role requires deep engineering experience, strong client communication, and ownership from design through production support in a fast-paced, enterprise