Microsoft Sentinel Engineer — MSSP Onboarding

Integrity360; Madrid; On-site; EUR 60,000 - 90,000; Full time

Job summary

Integrity360 is seeking a Microsoft Security Engineer to lead onboarding of client Microsoft Sentinel environments within our MSSP service. You will configure workspaces, connectors, analytics rules and ensure secure, scalable deployments aligned with service scope.

Ideal candidates will have hands‑on Sentinel experience, strong KQL, and familiarity with Defender XDR workloads. The role reports to the Head of Cloud Security & Microsoft Security Services and offers training opportunities.

Qualifications

• Hands-on experience deploying, configuring or supporting Microsoft Sentinel.
• Knowledge of Sentinel data connectors, Log Analytics workspaces and related tooling.
• Strong Kusto Query Language skills for validation and tuning.
• Experience onboarding log sources across Microsoft 365, Azure and third‑party platforms.

Responsibilities

• Deliver end‑to‑end onboarding of client Microsoft Sentinel environments into the MSSP service.
• Configure workspaces, data connectors, analytics rules and related components per designs.
• Run discovery sessions to identify log sources and onboarding priorities.
• Onboard and integrate Defender XDR workloads, including Defender for Endpoint/Identity/Office 365.
• Produce high‑level designs, implementation plans and handover documentation.
• Coordinate with clients, project managers and SOC teams for service transition readiness.
• Support troubleshooting during onboarding and early life service delivery.

Skills

Microsoft Sentinel

Kusto (KQL)

Azure Monitor

SIEM operations

Defender XDR

Onboarding log sources

Security engineering

Tools

Data Collection Rules

Syslog/CEF

Log Analytics workspaces

Azure Monitor Agent

Content designs

Job description

Integrity360 is seeking a Microsoft Security Engineer to lead onboarding of client Microsoft Sentinel environments within our MSSP service. You will configure workspaces, connectors, analytics rules and ensure secure, scalable deployments aligned with service scope.

Ideal candidates will have hands‑on Sentinel experience, strong KQL, and familiarity with Defender XDR workloads. The role reports to the Head of Cloud Security & Microsoft Security Services and offers training opportunities.