Security Engineer

BlueVoyant; United States; Remote; USD 110,000 - 160,000; Full time

Benefits offered by this job

Medical coverage for employees and its

Dental coverage for employees and its

Job summary

BlueVoyant is hiring a Security Engineer II for its Deployment Engineering team. The role focuses on enabling MDR solutions in customer environments through hands-on deployment of Microsoft security and Azure solutions.

You will lead the delivery of Microsoft Sentinel, Defender, and Azure deployments remotely, shaping detection content and analytics, while collaborating with global teams in a fast-paced setting.

Qualifications

• 5+ years of technical experience with Microsoft Cloud Security technologies or equivalent SIEM and XDR solutions.
• Hands-on deployment and management of Microsoft Sentinel and Defender products in production environments.
• Experience with SIEM/XDR technologies and customer-facing deployments.
• Strong communication skills for remote, client-facing work.

Responsibilities

• Lead deployment and tuning of Microsoft Sentinel, Defender, and Azure across customer environments.
• Deliver remote implementations from design and architecture through deployment and use-case tuning.
• Develop detection, automation, and reporting use cases based on customer requirements.
• Define and build security reports and dashboards for customers.
• Lead technical delivery on client-facing MDR projects and cross-team integration.

Skills

Azure Cloud

Microsoft XDR

Zero Trust

Microsoft Sentinel

Microsoft Defender

KQL

PowerShell

Python

Linux

SIEM/XDR

Certifications

Education

Bachelor’s degree or equivalent

Tools

Azure Logic Apps

Function Apps

PowerShell

Job description

• Reports To: Senior Manager, Security Engineering
• BlueVoyant is seeking a Security Engineer II to join our Deployment Engineering team, focused on enabling our Managed Detection and Response (MDR) solutions in customer environments. This fully remote role uses your expertise in Microsoft Cloud security technologies and SIEM platforms to lead client-facing SIEM and XDR technical enablement projects, including hands-on deployment of a broad range of Microsoft Security and Azure solutions
• Deliver Microsoft Sentinel and Defender implementations for customers remotely, from design and architecture through deployment and use case tuning
• Create and develop new detection, automation, and reporting use cases based on customer requirements
• Define and assist in building operational and executive security reports and dashboards
• Lead XDR integration activities across the Microsoft and Azure product stacks, applying Microsoft XDR and Zero Trust Architecture principles
• Serve as the lead technical delivery resource within a team for small to large client-facing projects
• Participate in research and development activities to drive process improvement and new product and feature enhancements
• Support client-facing environments on an ongoing basis to help mature and maintain our MDR practices
• Lead hands-on Microsoft Sentinel, Defender, and Azure deployments that directly shape how customers detect and respond to threats
• Work at the intersection of cloud security engineering, detection content, and customer delivery, building scalable solutions across diverse enterprise environments
• Join a global, mission-driven cybersecurity company defending organizations worldwide with cutting-edge data, technology, and expertise

Benefits

• Medical coverage for employees and their dependents
• Dental coverage for employees and their dependents
• Vision coverage for employees and their dependents
• Life insurance
• Short-term and long-term disability
• Retirement/401(k) plans (US & Canada)
• Generous paid time off (PTO)
• Extensive paid holiday schedule

Strong experience with Azure Cloud technologiesFamiliarity with Microsoft XDR and Zero Trust Architecture modelsHands-on experience deploying and/or managing Microsoft SentinelHands-on experience deploying and/or managing Microsoft Defender security products (e.g., Defender for Endpoint, Identity, Cloud Apps, Office 365, Defender for Cloud)Knowledge of enterprise IT systems as they relate to cybersecurityExcellent communication skills and the ability to thrive in a dynamic, fast-paced team environment5+ years of technical experience with Microsoft Cloud Security technologies or equivalent SIEM and XDR solutionsHands-on engineering experience with SIEM and/or XDR technologies in production environmentsExperience with query languages and/or script development (KQL, SPL, SQL, PowerShell, or similar)Relevant Microsoft certifications (e.g., SC-200, AZ-500) are a plusBachelor’s degree in a related field or equivalent professional experience and certificationsExpertise in Kusto Query Language (KQL), including Sentinel Analytic Rules and Defender Custom Detection RulesExpertise in Azure Logic Apps, Function Apps, and other Azure technologiesIncident investigation and response skillsExperience in customer-facing rolesProficiency in Python, PowerShell, or C#/.NETProficiency in Linux configuration and common administration tasksExperience with non-Microsoft SIEM or EDR tools