Microsoft Sentinel SIEM Engineer

InnoCore Solutions, Inc.; Dallas (TX); On-site; USD 120,000 - 180,000; Full time

Job summary

InnoCore Solutions, Inc. in Dallas, TX is seeking a senior SIEM engineer to configure and manage Microsoft Sentinel for enterprise security monitoring, develop detections, and oversee incident response.

You will build automation playbooks, integrate logs from Microsoft and third-party systems, and collaborate with security and infrastructure teams to strengthen defenses. A Bachelor's degree in CS/Engineering is required.

Qualifications

• 5+ years supporting enterprise SIEM platforms.
• Hands-on MS Sentinel administration, monitoring, and detection engineering.
• Experience with KQL, analytics rules, and automation.
• PKI engineering: CP/CPS, enrollment protocols, NIST SP 800-63.
• Knowledge of incident detection, investigation and remediation.
• Experience with Defender, Entra ID and cloud security.
• Strong troubleshooting and communication skills.
• Nice to have AI/LLM-assisted security tooling.

Responsibilities

• Configure and manage Microsoft Sentinel SIEM for enterprise security monitoring.
• Develop and maintain security detections, analytics rules, and KQL queries.
• Monitor security alerts and investigate security incidents.
• Perform threat hunting and support incident remediation activities.
• Build automation playbooks using Microsoft Sentinel and Logic Apps.
• Integrate security logs from Microsoft and third-party systems.
• Support PKI infrastructure including certificate monitoring and lifecycle management.
• Monitor AD CS, CA, CRLs, and authentication events.
• Create dashboards, workbooks, and security reports.
• Collaborate with security and infrastructure teams to improve enterprise security.

Skills

MS Sentinel administration

KQL / analytics rules

Automation / playbooks

Threat detection & incident response

PKI engineering

AI tooling (nice to have)

Education

Bachelor's degree in Computer Science/Engineering

Tools

Microsoft Sentinel

Logic Apps

Job description

• Configure and manage Microsoft Sentinel SIEM for enterprise security monitoring.
• Develop and maintain security detections, analytics rules, and KQL queries.
• Monitor security alerts and investigate security incidents.
• Perform threat hunting and support incident remediation activities.
• Build automation playbooks using Microsoft Sentinel and Logic Apps.
• Integrate security logs from Microsoft and third-party systems.
• Support PKI infrastructure including certificate monitoring and certificate lifecycle management.
• Monitor Active Directory Certificate Services (AD CS), Certificate Authorities, CRLs, and authentication events.
• Create dashboards, workbooks, and security reports.
• Collaborate with security and infrastructure teams to improve enterprise security.

Requirements:

• 5 years of experience supporting enterprise SIEM platforms.
• Hands-on experience with Microsoft Sentinel administration, monitoring, and detection engineering.
• Experience with KQL, analytics rules, and automation.
• PKI Engineering: Demonstrable understanding of PKI solution design and operations: enrollment protocols (SCEP, EST), Certificate Policy / Certification Practice Statement (CP/CPS), trusted roles, Levels of Assurance, NIST SP 800-63, and real use cases such as certificate-based authentication and software signing/validation.
• Knowledge of incident detection, investigation, and remediation.
• Experience with Microsoft Defender, Microsoft Entra ID, and cloud security.
• Strong troubleshooting, analytical, and communication skills.
• Nice to have: Hands-on AI/agentic security tooling (e.g., Claude / LLM-assisted code & configuration analysis, prompt engineering for security use cases)

Education:

• Bachelor's degree in Computer Science/Engineering or a related field