Microsoft Sentinel Engineer – Onboarding & Defender XDR

Integrity360; Dublin; On-site; EUR 70,000 - 110,000; Full time

Job summary

Integrity360 is seeking a Microsoft Security Engineer to drive onboarding of client Microsoft Sentinel environments as part of our MSSP service. You will configure workspaces, connectors, and analytics rules, onboarding log sources and Defender XDR workloads while collaborating with clients, architects and SOC teams.

You will produce high-level designs and implementation plans, ensuring secure handover and supportability.

Qualifications

• Hands-on experience deploying Microsoft Sentinel in production environments.
• Knowledge of Sentinel connectors, workspaces, and data ingestion patterns.
• Strong ability to design and document high-level designs and runbooks for onboarding projects.

Responsibilities

• Deliver end-to-end onboarding of client Microsoft Sentinel environments into MSSP service.
• Configure Sentinel workspaces, data connectors, analytics rules and automation rules.
• Onboard log sources via Azure Monitor Agent, CEF, syslog and APIs.
• Design data filtering and transformation to optimise telemetry and costs.
• Validate ingestion, parsing, mapping and health across sources and Azure services.
• Tune analytics rules and detection logic with SOC and engineering teams.
• Onboard Defender XDR workloads (Endpoint, Identity, Office 365, Cloud Apps).
• Produce designs, implementation plans, runbooks and handover material.
• Coordinate with clients and teams to manage dependencies and readiness for transition.

Skills

Microsoft Sentinel

Kusto Query Language

Azure Monitor

Data ingestion

SIEM operations

Defender XDR

Onboarding & integration

Threat detection tuning

Tools

Azure Monitor Agent

Data Collection Rules

Syslog

CEF

APIs

Log Analytics

Job description

Integrity360 is seeking a Microsoft Security Engineer to drive onboarding of client Microsoft Sentinel environments as part of our MSSP service. You will configure workspaces, connectors, and analytics rules, onboarding log sources and Defender XDR workloads while collaborating with clients, architects and SOC teams.

You will produce high-level designs and implementation plans, ensuring secure handover and supportability.