Remote Senior Security Engineer: Microsoft Defender XDR

Red Clay Consulting; Mandaluyong; Remote; PHP 1,200,000 - 1,800,000; Full time

Job summary

Red Clay Consulting seeks an experienced Senior Security Engineer to join our remote team in the Philippines. This senior IC role owns our Microsoft 365 security stack, drives threat detection with Defender XDR and Sentinel, and supports SOC 2 Type 2 compliance.

You will operate independently, work with IT, engineering, and leadership to implement controls, monitor security alerts, create playbooks, and help mature our security program while maintaining overlap with US business hours.

Qualifications

• 5+ years of hands-on experience in a security engineering or security operations role.
• 3+ years of deep, practical experience with the Microsoft 365 security suite (Defender XDR, Sentinel, Entra ID, Purview).
• Demonstrated experience supporting or leading a SOC 2 Type 2 audit - from control design through evidence delivery.
• Proficiency in KQL for building detection rules, hunting queries, and dashboards in Sentinel.
• Experience with Azure cloud security, including Defender for Cloud, RBAC, and policy management.
• Hands-on experience with SOAR/automation - Logic Apps, Sentinel playbooks, or equivalent.

Responsibilities

• Own the Microsoft security stack across Defender products and Purview.
• Configure and maintain Microsoft Sentinel - rules, analytics, workbooks, and playbooks.
• Monitor Secure Score and drive remediation actions across the tenant.
• Configure Conditional Access, Entra ID security settings, and Privileged Identity Management.
• Manage Purview compliance features including DLP and information protection policies.
• Monitor alerts and respond to incidents across Defender XDR and Sentinel.
• Develop incident response playbooks and automation workflows (Logic Apps).
• Perform threat hunting using KQL and identify gaps in detection coverage.
• Lead vulnerability remediation with IT and engineering teams.
• Support SOC 2 Type 2 audit readiness and evidence collection.

Skills

KQL

Microsoft Defender

Microsoft Sentinel

Entra ID / Azure AD

Defender for Endpoint

Defender for Identity

Defender for Cloud Apps

DLP / Purview

SOAR / automation

Incident response

Threat hunting

Azure security

RBAC / policy management

PIM

PowerShell / Python

Tools

Logic Apps

Sentinel playbooks

Azure Security Center

Purview

Job description

Red Clay Consulting seeks an experienced Senior Security Engineer to join our remote team in the Philippines. This senior IC role owns our Microsoft 365 security stack, drives threat detection with Defender XDR and Sentinel, and supports SOC 2 Type 2 compliance.

You will operate independently, work with IT, engineering, and leadership to implement controls, monitor security alerts, create playbooks, and help mature our security program while maintaining overlap with US business hours.