Remote Senior SIEM Engineer — Microsoft Sentinel Expert

ecsfederal; Virginia (MN); Hybrid; USD 140,000 - 180,000; Full time

Job summary

Everforth ECS is seeking a Sr. SIEM Engineering Consultant to join our MSSP team remotely.

You will design, deploy, and maintain Microsoft Sentinel environments at scale, building ingestion pipelines, analytics, dashboards, and automation to improve security visibility and response. You will work with engineering, DevOps, cloud, and client teams to implement security monitoring across Azure, AWS, GCP, and hybrid environments, using Terraform, Ansible, and CI/CD to automate deployments, while

Qualifications

• Hands-on experience with Microsoft Sentinel and Azure Monitor
• Proficient in KQL for detection development
• Strong scripting skills (Python, PowerShell, Bash)
• Experience designing, deploying, and operating production-scale SIEM environments
• Familiarity with data connectors, log ingestion, and analytics rules
• Ability to mentor teams and collaborate across engineering, DevOps, cloud, and client teams

Responsibilities

• Design, deploy, and maintain Microsoft Sentinel environments
• Build data ingestion pipelines, detection rules, queries, dashboards, and automation workflows
• Write scripts and integrations to streamline security operations
• Deploy and manage Sentinel across Azure with AWS/GCP and hybrid/on-prem
• Use Terraform, Ansible, CI/CD for deployments
• Integrate Sentinel with Defender, identity providers, firewalls, EDR and telemetry sources
• Monitor health and optimize for cost, reliability, and scalability
• Develop detection use cases aligned to MITRE ATT&CK
• Configure incident management, alert grouping, and response workflows
• Implement playbooks for automation and response
• Lead design reviews and share SIEM best practices
• Maintain architecture docs, runbooks, and best practices
• Stay current with Microsoft security technologies

Skills

Microsoft Sentinel

Azure Monitor

KQL

Python

PowerShell

Bash

Terraform

Ansible

CI/CD

Incident response

Data ingestion

Tools

Log Analytics

Workbooks

Terraform

Ansible

Job description

Everforth ECS is seeking a Sr. SIEM Engineering Consultant to join our MSSP team remotely.

You will design, deploy, and maintain Microsoft Sentinel environments at scale, building ingestion pipelines, analytics, dashboards, and automation to improve security visibility and response. You will work with engineering, DevOps, cloud, and client teams to implement security monitoring across Azure, AWS, GCP, and hybrid environments, using Terraform, Ansible, and CI/CD to automate deployments, while