Remote SOC Engineer - Onboarding & SIEM

Quzara LLC; United States; Remote; USD 120,000 - 150,000; Full time

Job summary

Quzara LLC seeks a hands-on SOC Engineer to onboard customers into our managed security services and maintain their security tooling and telemetry. You will work with customers and internal teams to integrate data sources, configure Microsoft security services, automate workflows, and resolve issues in federal and regulated environments.

The role requires 5+ years in IT infrastructure or security, 3+ years with Microsoft Azure, and 2+ years with Microsoft Sentinel or another enterprise SIEM.

Qualifications

• Bachelor's degree preferred or equivalent experience.
• 5+ years in IT infrastructure, cloud, or security engineering, including 3+ years hands-on with Microsoft Azure.
• 2+ years with Microsoft Sentinel or a comparable enterprise SIEM with data-source onboarding.
• Strong working knowledge of the Microsoft security stack (Sentinel, Defender XDR, Entra ID, Azure Monitor / Log Analytics) and multi-tenant access.
• Hands-on experience onboarding data sources (identity, endpoints, firewalls, SaaS, Syslog/CEF, API) from Azure, AWS, and Google Workspace.
• Experience across multiple SIEM platforms (Microsoft Sentinel, Splunk, SentinelOne, IBM QRadar).
• Proficiency in KQL and scripting (PowerShell or Python).
• Strong written and customer-facing communication skills.
• AZ-500 or SC-200 certification (current).
• Preferred: MSSP/MDR experience; GCC/GCC High environments; CrowdStrike or SentinelOne experience.

Responsibilities

• Lead onboarding of new customers from discovery through configuration and handoff.
• Configure and integrate Microsoft security services (Sentinel, Defender XDR, Entra ID) with customer environments.
• Onboard and validate security telemetry from identity, endpoints, networks, SaaS, and multi-cloud sources (Azure, AWS, Google Workspace).
• Integrate and troubleshoot log sources across SIEMs (Microsoft Sentinel, Splunk, SentinelOne, IBM QRadar).
• Troubleshoot ingestion and integration issues across cloud, identity, network, Windows, and Linux layers.
• Build automation and scripts to make onboarding and operations repeatable.
• Support customers under FedRAMP, CMMC, and NIST frameworks.
• Produce clear technical documentation and resolve onboarding blockers with stakeholders.

Education

Bachelor's degree or equivalent experience

Tools

Microsoft Sentinel

Defender XDR

Entra ID

Azure Monitor / Log Analytics

PowerShell

Python

KQL

Splunk

IBM QRadar

Job description

Quzara LLC seeks a hands-on SOC Engineer to onboard customers into our managed security services and maintain their security tooling and telemetry. You will work with customers and internal teams to integrate data sources, configure Microsoft security services, automate workflows, and resolve issues in federal and regulated environments.

The role requires 5+ years in IT infrastructure or security, 3+ years with Microsoft Azure, and 2+ years with Microsoft Sentinel or another enterprise SIEM.