Microsoft Sentinel Onboarding Engineer

Integrity360; Stockholms kommun; On-site; SEK 700,000 - 1,200,000; Full time

Job summary

Integrity360 is seeking a Microsoft Security Engineer in Sweden to lead onboarding of client Microsoft Sentinel deployments, configuring workspaces, connectors and analytics rules, and ensuring a secure handover to the SOC team.

You will work with clients and architects, deliver high-level designs and runbooks, and expand expertise across Defender XDR workloads while travelling to client sites as needed.

Qualifications

• Hands-on experience deploying Microsoft Sentinel in production environments.
• Knowledge of Sentinel data connectors, Log Analytics workspaces, and related patterns.
• Strong Kusto Query Language skills for validation and tuning.
• Experience onboarding log sources across Microsoft 365, Azure and third-party platforms.
• Understanding ingestion filtering and data transformation costs.
• Ability to produce clear technical designs and handover materials.

Responsibilities

• Deliver end-to-end onboarding of client Microsoft Sentinel environments.
• Configure workspaces, data connectors, analytics rules, and runbooks.
• Conduct technical discovery to identify log sources and data requirements.
• Onboard and integrate Defender XDR workloads with Sentinel.
• Produce design docs, runbooks and handover materials.
• Collaborate with clients, architects, SOC and service teams; travel as needed.

Skills

KQL

Troubleshooting

Client communication

Independent working

Education

Microsoft Certifications (SC-200, AZ-500, SC-100)

Tools

Microsoft Sentinel

Azure Monitor

Data Collection Rules

Log Analytics

Defender XDR

Azure CLI

Bicep/ARM

Job description

Integrity360 is seeking a Microsoft Security Engineer in Sweden to lead onboarding of client Microsoft Sentinel deployments, configuring workspaces, connectors and analytics rules, and ensuring a secure handover to the SOC team.

You will work with clients and architects, deliver high-level designs and runbooks, and expand expertise across Defender XDR workloads while travelling to client sites as needed.