Microsoft Sentinel Security Engineer — MSSP Onboarding

Integrity360; City Of London; Vor Ort; GBP 70.000 - 110.000; Vollzeit

Zusammenfassung

Integrity360, a leading cybersecurity specialist, seeks a Microsoft Security Engineer for its Professional Services team. You will onboard clients to the MSSP service with Microsoft Sentinel at the center, configuring workspaces, connectors and data ingestion, and producing design and runbooks for handover.

You’ll collaborate with clients, architects and SOC teams to ensure secure deployments, including Defender XDR workloads, delivering repeatable patterns and documentation across

Qualifikationen

• Hands-on experience deploying, configuring or supporting Microsoft Sentinel in production or customer environments.
• Practical knowledge of Sentinel data connectors, Log Analytics workspaces, Azure Monitor Agent, Data Collection Rules, syslog and CEF collection patterns.
• Strong Kusto Query Language (KQL) skills for data validation, troubleshooting and detection tuning.
• Experience onboarding and troubleshooting log sources across Microsoft 365, Azure, endpoints, identity, network and third-party platforms.
• Understanding ingestion filtering, data transformation, parsing, normalization and telemetry cost implications.
• Ability to produce clear technical designs and delivery documentation (HLDs, implementation plans, runbooks).
• Working knowledge of Defender XDR integrations with Sentinel.
• Familiarity with SIEM operations and incident workflows.

Aufgaben

• Deliver end-to-end onboarding of client Sentinel environments into the MSSP service.
• Configure Sentinel workspaces, content solutions, data connectors, analytics rules and related components.
• Run technical discovery sessions to identify log sources, connectivity requirements and data volumes.
• Onboard log sources using supported methods (Azure Monitor Agent, APIs, syslog, CEF).
• Design data filtering and transformation to improve signal quality and control costs.
• Validate data ingestion, parsing, and troubleshooting across source systems.
• Tune analytics rules and incident generation to balance coverage and noise.
• Onboard Defender XDR workloads (Endpoint, Identity, Office 365, Cloud Apps).
• Produce high-level designs, implementation plans and handover documentation.
• Coordinate with clients, architects and SOC teams for risk and readiness.
• Apply engineering standards and contribute to templates and patterns.
• Support onboarding and early-life support.
• Occasional travel as required.

Kenntnisse

Sentinel deployment

KQL queries

Azure Monitor

SIEM operations

Log onboarding

Security engineering

Client-facing

Azure Defender

Tools

Azure Sentinel

Azure Monitor

Data Collection Rules

CEF collection

Azure DevOps

PowerShell

Terraform

Bicep/ARM

Jobbeschreibung

Integrity360, a leading cybersecurity specialist, seeks a Microsoft Security Engineer for its Professional Services team. You will onboard clients to the MSSP service with Microsoft Sentinel at the center, configuring workspaces, connectors and data ingestion, and producing design and runbooks for handover.

You’ll collaborate with clients, architects and SOC teams to ensure secure deployments, including Defender XDR workloads, delivering repeatable patterns and documentation across