Senior Security Operations Analyst - Microsoft Sentinel and Defender (Calgary, AB, CA, T2P 1M4)

EY; Calgary; On-site; CAD 90,000 - 130,000; Full time

Job summary

EY is seeking a senior, hands-on security operations analyst to support Managed Detection and Response services across multiple customers in a MSP environment. You will lead complex security investigations using Microsoft Sentinel and Defender XDR, perform threat hunting, and tune detections to improve overall security postures.

Based in Canada, you will provide technical guidance to fellow analysts and communicate findings and recommendations clearly to clients, helping build resilient security

Qualifications

• Senior hands-on security operations experience in MSP environments.
• Strong experience with Microsoft Sentinel and Defender XDR.
• Ability to communicate findings and recommendations clearly to clients.

Responsibilities

• Lead complex security incident investigations across multiple customer environments.
• Perform threat hunting and detection tuning.
• Improve response workflows with automation rules, playbooks, and Azure Logic Apps.

Skills

Security operations

Incident response

Microsoft Sentinel

Defender XDR

Threat hunting

Automation

Tools

Azure Logic Apps

Microsoft Defender XDR

Microsoft Sentinel

Job description

At EY, we’re all in to shape your future with confidence.

We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go.

Join EY and help to build a better working world.

The opportunity

EY is seeking a senior, hands-on security operations analyst to support Managed Detection and Response services in a multi-customer Managed Security Service Provider environment.

You will lead complex security incident investigations using Microsoft Sentinel and Microsoft Defender XDR, perform threat hunting and detection tuning, and improve response workflows through Microsoft Sentinel automation rules, playbooks, and Azure Logic Apps. You will work across multiple customer environments, provide technical guidance to other analysts, and communicate clear findings and response recommendations to clients.

The successful candidate will bring strong investigative judgement, advanced Microsoft security platform experience, and the ability to