Microsoft Sentinel Onboarding Engineer

Integrity360; Royal Borough of Greenwich; On-site; GBP 60,000 - 85,000; Full time

Job summary

Integrity360 is a leading cybersecurity and PCI specialist with a global footprint. We seek a Microsoft Security Engineer to onboard clients to our MSSP service, centering on Microsoft Sentinel deployments and Defender XDR workloads.

You will configure workspaces, connectors and analytics, validate ingestion, and produce design documentation while collaborating with clients, architects and SOC teams. Travel may be required for delivery.

Qualifications

• Hands-on experience deploying Microsoft Sentinel in production or customer environments.
• Practical knowledge of Sentinel data connectors, Log Analytics workspaces, Azure Monitor Agent, Data Collection Rules, syslog and CEF collection patterns.
• Strong Kusto Query Language skills for data validation, troubleshooting, investigation and detection tuning.
• Experience onboarding and troubleshooting log sources across Microsoft 365, Azure, endpoints, identity, network, security and third-party platforms.
• Understanding ingestion filtering, data transformation, parsing, normalisation, retention and cost implications of security telemetry.
• Experience creating clear technical designs and delivery documentation, including HLDs, implementation plans, test records and operational handover materials.
• Working knowledge of Microsoft Defender XDR and its integration with Sentinel.
• Sound understanding of SIEM operations, detection engineering principles, incident workflows and managed security service requirements.

Responsibilities

• Deliver end-to-end onboarding of client Microsoft Sentinel environments into the MSSP service.
• Configure Sentinel workspaces, content solutions, data connectors, analytics rules, automation rules, watchlists and workbooks per designs.
• Onboard log sources using supported collection methods and design data filtering to control ingestion costs.
• Validate data ingestion, parsing, field mapping and troubleshooting across source systems.
• Produce high-level designs, implementation plans and handover documentation.
• Coordinate with clients, architects, SOC analysts and service teams to manage dependencies and readiness for service transition.

Skills

Microsoft Sentinel

KQL

Azure Monitor

Data Collection Rules

Log Analytics

SIEM operations

Defender XDR

Onboarding logs

Communication

Tools

Terraform

PowerShell

Azure CLI

Bicep

ARM templates

Job description

Integrity360 is a leading cybersecurity and PCI specialist with a global footprint. We seek a Microsoft Security Engineer to onboard clients to our MSSP service, centering on Microsoft Sentinel deployments and Defender XDR workloads.

You will configure workspaces, connectors and analytics, validate ingestion, and produce design documentation while collaborating with clients, architects and SOC teams. Travel may be required for delivery.