Senior Cloud Security & Incident Response Engineer

Teleion Consulting LLC.; Seattle (WA); On-site; USD 155,000 - 200,000; Full time

Benefits offered by this job

Benefits package

Paid time off (PTO)

Company holidays

401(k)

Job summary

Teleion Consulting LLC. is seeking a Senior Cybersecurity Engineer to strengthen cloud security posture, mature incident response, and advance data security for enterprise clients.

The role covers detection engineering, real incidents, and Azure/multi‑cloud hardening within the Microsoft security ecosystem. The ideal candidate has deep hands-on experience with Microsoft Sentinel, Defender XDR, Defender for Cloud, Entra ID, Intune, and Purview, and leads real incidents from containment through

Qualifications

• 7+ years of security engineering or security operations in enterprise settings.
• Hands-on, production-grade experience across the Microsoft security stack.
• Experience leading real incidents end-to-end including containment and reporting.
• Strong KQL skills: create rules, hunting queries, MITRE mapping.

Responsibilities

• Configure and operate the Microsoft security stack in client environments.
• Lead end-to-end incident response for real security events.
• Coordinate with MXDR or SOC providers on escalation and handoffs.
• Develop automation via PowerShell and Microsoft Graph API.
• Design and tune Purview DLP policies and sensitivity labels.

Skills

Security engineering

Microsoft security stack

KQL

PowerShell

Microsoft Purview

Incident response leadership

Azure security

Security automation

Cloud security

SOC coordination

Certification prep (AZ-500, CISSP etc)

Education

Certifications: AZ-500, SC-200, SC-400, SC-100, GCIH, GCFA, CISSP

Tools

Microsoft Sentinel

Defender XDR

Defender for Cloud

Entra ID

Intune

Microsoft Purview

PowerShell

Microsoft Graph API

Job description

Teleion Consulting LLC. is seeking a Senior Cybersecurity Engineer to strengthen cloud security posture, mature incident response, and advance data security for enterprise clients.

The role covers detection engineering, real incidents, and Azure/multi‑cloud hardening within the Microsoft security ecosystem. The ideal candidate has deep hands-on experience with Microsoft Sentinel, Defender XDR, Defender for Cloud, Entra ID, Intune, and Purview, and leads real incidents from containment through