Microsoft Sentinel Engineer — MSSP Onboarding Expert

Integrity360; Stockholms kommun; Presencial; SEK 900.000 - 1.100.000; Jornada completa

Descripción de la vacante

Integrity360 is seeking a Microsoft Security Engineer to lead onboarding of client Microsoft Sentinel environments within our MSSP service. You will configure workspaces, connectors and data sources, ensuring secure, monitored deployments and smooth handover to the SOC.

You will collaborate with clients, architects and service teams, develop high‑level designs and runbooks, and expand Defender XDR workloads integration to deliver joined‑up detection and response across the Microsoft security

Formación

• Hands-on experience deploying, configuring or supporting Microsoft Sentinel in production or customer environments.
• Strong knowledge of Sentinel data connectors and related Azure services.
• Excellent written and verbal communication with technical and non-technical stakeholders.

Responsabilidades

• Deliver end-to-end onboarding of client Microsoft Sentinel environments into MSSP service.
• Configure Sentinel workspaces and data connectors per approved designs.
• Run discovery sessions to identify log sources and onboarding priorities.
• Onboard log sources using methods like Azure Monitor Agent, APIs, and CEF.
• Design data filtering to manage telemetry and costs.
• Produce high-level designs, implementation plans and runbooks.
• Coordinate with clients, architects and SOC teams for service readiness.
• Onboard and integrate Defender XDR workloads with Sentinel.

Conocimientos

Troubleshooting

Client engagement

Independent working

Herramientas

Microsoft Sentinel

Azure Monitor

Log Analytics

Kusto Query Language

Data Collection Rules

Descripción del empleo

Integrity360 is seeking a Microsoft Security Engineer to lead onboarding of client Microsoft Sentinel environments within our MSSP service. You will configure workspaces, connectors and data sources, ensuring secure, monitored deployments and smooth handover to the SOC.

You will collaborate with clients, architects and service teams, develop high‑level designs and runbooks, and expand Defender XDR workloads integration to deliver joined‑up detection and response across the Microsoft security