Cyber Security Engineer

Hamilton Barnes ?; New York (NY); Hybrid; USD 145,000 - 185,000; Full time

Job summary

Hamilton Barnes partners with a growing New York MSP to hire a Cyber Security Engineer focused on Microsoft security. You will design, deploy and run Defender XDR, Sentinel, Entra ID, Intune and Defender for Cloud across a portfolio of client environments in a hybrid model.

Ideal candidates have 4+ years in security engineering, hands-on experience with Microsoft Sentinel and Defender XDR, strong KQL skills, and the ability to lead onboarding and produce client-facing runbooks and reports.

Qualifications

• 4+ years in security engineering or SOC engineering.
• Hands-on experience with Microsoft Defender XDR and Microsoft Sentinel.
• Strong KQL skills for detections and hunting.
• Knowledge of Entra ID, Conditional Access, PIM and Intune.
• Understanding Azure networking and security controls.

Responsibilities

• Design, deploy and run Microsoft security platforms across client environments (Defender XDR, Sentinel, Entra ID, Intune, Defender for Cloud).
• Lead client onboardings and act as escalation point for SOC analysts.
• Write runbooks, architecture docs and client-facing reports.
• Present findings to client IT and security leaders.
• Develop automation with Logic Apps and Sentinel rules.

Skills

4+ years in security engineering

MS Sentinel

Defender XDR

KQL

Entra ID

Intune

PowerShell/Python scripting

MITRE ATT&CK/NIST CIS

Tools

Azure Lighthouse

Logic Apps

Job description

Cyber Security Engineer (Microsoft Security)

New York, NY (Hybrid) | Full-time | $145,000 - $185,000 + bonus

About our client

We're partnering with a growing Managed Security Services Provider and Microsoft Solutions Partner for Security, based in New York City. They run a 24/7 security operations center and protect organizations across financial services, healthcare, legal and professional services, delivering managed detection and response, Microsoft security deployments and ongoing security engineering.

As they continue to grow their client base, they're adding an experienced Cyber Security Engineer to their Microsoft security team.

The role

You'll design, deploy and run Microsoft security platforms across a portfolio of client environments built on Microsoft Defender XDR, Microsoft Sentinel, Entra ID, Intune and Defender for Cloud.

You'll work across several clients at once, lead new client onboardings, and act as the technical escalation point for SOC analysts. This role suits an engineer who enjoys variety, client contact and hands-on depth across the full Microsoft security stack.

What you'll do

• Deploy, configure and maintain Microsoft Sentinel across multiple client tenants, including data connectors, log ingestion and cost optimization.
• Manage client environments centrally through Azure Lighthouse and Defender XDR multi-tenant management.
• Deploy and tune Defender for Endpoint, Identity, Office 365, Cloud Apps and Cloud.

Detection and response

• Build and tune analytics rules and hunting queries in KQL, mapped to MITRE ATT&CK.
• Build automation with Logic Apps playbooks and Sentinel automation rules.
• Serve as the escalation point for SOC analysts and support incident response engagements.

Identity, endpoint and cloud hardening

• Implement Zero Trust controls, including Entra ID Conditional Access, PIM, MFA and Identity Protection.
• Deploy Intune compliance and configuration policies.
• Harden Microsoft 365 and Azure tenants using Secure Score and CIS Benchmarks.
• Lead technical onboarding for new clients, from discovery through go-live.
• Write runbooks, architecture documents and client-facing reports.
• Present findings and recommendations to client IT and security leaders.

What you'll bring

• 4+ years in security engineering, SOC engineering or a related role.
• Hands-on production experience with Microsoft Sentinel and the Defender XDR suite.
• Strong KQL skills for detections, hunting and workbooks.
• Working knowledge of Entra ID, Conditional Access, PIM and Intune.
• Understanding of Azure networking and security controls (NSGs, Azure Firewall, Key Vault, Azure Policy).
• Scripting in PowerShell or Python.
• Familiarity with MITRE ATT&CK, NIST CSF and CIS Controls.
• Clear communication with both technical and non-technical audiences.

Nice to have

• Microsoft certifications: SC-200, AZ-500, SC-100 or SC-300.
• CISSP, GIAC (GCIH, GCDA) or CompTIA Security+.
• Previous MSSP, MDR or consulting experience.
• Azure Lighthouse, Bicep, ARM templates or Terraform.
• Experience in regulated sectors such as financial services (NYDFS Part 500), healthcare (HIPAA) or SOC 2 environments.

What's on offer

• $145,000 - $185,000 base salary, plus annual performance bonus.
• Medical, dental and vision insurance.
• 401(k) with company match.
• Paid Microsoft and industry certifications, plus a yearly training budget.
• Hybrid working: 1 day a week in their Manhattan office.