Cybersecurity Detection Engineer (SIEM/XDR)

MSD; Rahway (NJ); Hybrid; GBP 80,000 - 110,000; Full time

Job summary

MSD is seeking a Platform Engineer focused on security engineering, detection engineering, and SOC operations. You will engineer, operate, and optimize Microsoft Sentinel and Defender XDR across hybrid and multi-cloud environments.

The role involves supporting Google Chronicle SIEM for high-volume telemetry, designing scalable ingestion architectures, and ensuring reliability, performance, and cost discipline. Collaboration with CFC/SOC, Cloud Security, Identity, and Compliance is essential.

Qualifications

• 5+ years of experience in security engineering, detection engineering, or SOC roles.
• Hands-on with Microsoft Sentinel and Defender XDR.
• Experience with Google Security Operations (Chronicle SIEM) or similar large-scale cloud SIEM.
• Proficiency in KQL and writing structured detection logic.
• Understanding of cloud security (Azure/GCP), identity, endpoint, and network telemetry.

Responsibilities

• Engineer, operate, and optimize Microsoft Sentinel and Defender XDR.
• Operate Google Chronicle SIEM to support high-volume security telemetry ingestion and analytics.
• Design scalable ingestion architectures for multi-cloud environments.
• Ensure platform reliability, performance, and cost awareness.
• Support detection tuning, incident investigation, threat hunting, and response actions.
• Collaborate with various security and compliance teams.

Skills

Microsoft Sentinel

Microsoft Defender XDR

Google Chronicle SIEM

KQL

Cloud security

IAM

Incident response

Threat detection

Tools

Chronicle SIEM

Azure

GCP

Job description

MSD is seeking a Platform Engineer focused on security engineering, detection engineering, and SOC operations. You will engineer, operate, and optimize Microsoft Sentinel and Defender XDR across hybrid and multi-cloud environments.

The role involves supporting Google Chronicle SIEM for high-volume telemetry, designing scalable ingestion architectures, and ensuring reliability, performance, and cost discipline. Collaboration with CFC/SOC, Cloud Security, Identity, and Compliance is essential.