Senior Cloud & Incident Response Security Engineer

WideNet Consulting Group; Seattle (WA); On-site; USD 243,560,000 - 272,214,000; Full time

Benefits offered by this job

Health benefits

401K

Employee Assistance Program

Sick time

Job summary

WideNet Consulting Group in Seattle is seeking a Sr. Cybersecurity Engineer specializing in Cloud and Incident Response to strengthen cloud security posture and incident response capabilities.

The role requires onsite work 2-3 days per week with potential PST remote options. You will lead cloud security hardening, SIEM optimization, DLP, and zero-trust initiatives, coordinating with MSPs and internal teams.

Qualifications

• 7+ years in security engineering or security operations.
• Direct, demonstrable Microsoft Purview experience across DLP, sensitivity labels, and Insider Risk Management.
• Deep hands-on Microsoft security stack experience: Sentinel, Defender XDR, Defender for Cloud, Entra ID, Intune.
• Strong KQL authoring ability, including detection development and investigative hunting.
• Clear written communication for both technical peers and executive audiences.
• Azure cloud security depth, including identity, networking, and workload protection.

Responsibilities

• Harden Azure and multi-cloud environments against benchmarks and cloud security posture findings.
• Remediate Defender for Cloud findings and drive secure score improvement.
• Implement workload protection, configuration baselines, and IaC security checks.
• Address cloud identity and entitlement risk, including overprivileged roles and service principals.
• Enhance and operationalize incident response playbooks aligned to NIST SP 800-61.
• Lead investigations across cloud, identity, endpoint, email, and SaaS; coordinate with MSP on escalation and handoff.
• Tune Microsoft Sentinel for signal quality, cost efficiency, and retention; develop KQL rules and hunting queries.
• Map detection coverage to MITRE ATT&CK and close gaps; reduce false positives with SOAR automation.
• Design and deploy Purview DLP policies; implement sensitivity labels and data classification at scale.
• Advance zero trust maturity across identity, device, network, application, and data pillars.

Skills

Security engineering

KQL

PowerShell

Azure security

Security operations

Executive communication

Tools

Sentinel

Defender XDR

Defender for Cloud

Entra ID

Intune

Purview

Microsoft Graph API

SOAR

Job description

WideNet Consulting Group in Seattle is seeking a Sr. Cybersecurity Engineer specializing in Cloud and Incident Response to strengthen cloud security posture and incident response capabilities.

The role requires onsite work 2-3 days per week with potential PST remote options. You will lead cloud security hardening, SIEM optimization, DLP, and zero-trust initiatives, coordinating with MSPs and internal teams.