Senior Cybersecurity Engineering Consultant - SIEM & XDR

LevelBlue; United States; On-site; USD 150,000 - 210,000; Full time

Job summary

LevelBlue is seeking a Senior Cybersecurity Engineering Consultant to lead client-facing engagements across SIEM engineering, Microsoft Defender XDR integration, and security operations optimization. You will own design and build work on live engagements, including analytics, detection logic, security integrations, and client-ready deliverables.

You will run workshops, provide SME-level guidance for both technical and non-technical stakeholders, and produce artifacts that clients can operate and

Qualifications

• Experience delivering client-focused engagements in security engineering.
• Hands-on Microsoft Sentinel engineering in production.
• Experience producing detection design records (AIR DDRs).
• Hands-on Microsoft Defender XDR in a SOC context.
• Hands-on Microsoft Purview configuration in security/compliance context.

Responsibilities

• Lead SIEM design and implementation on greenfield SOC builds and brownfield optimization: data-source onboarding, analytics rules, hunting queries, automation rules and playbooks, workbooks, incident process alignment and use-case documentation.
• Design and build custom detection content aligned to the client’s threat profile and telemetry.
• Integrate and operationalize Microsoft Defender XDR.
• Assess requirements and advise on best-practice implementation and configuration for Microsoft Purview, Entra ID, Defender for Cloud, Azure security.
• Build practical automation to improve response quality: Sentinel automation rules, Logic Apps, analyst actions.
• Produce client-ready design and build artifacts: use case catalog, automation/playbook designs, implementation plans, gap analyses, tactical roadmaps.
• Facilitate workshops and discussion sessions; capture requirements, decisions, risks, and scope changes.
• Support pre-sales with effort estimates, technical scope, and solution shaping.

Skills

Client workshops

Microsoft Sentinel

Microsoft Defender XDR

Microsoft Purview

KQL

Tools

Microsoft Sentinel

Microsoft Defender XDR

Microsoft Purview

KQL

Job description

LevelBlue is seeking a Senior Cybersecurity Engineering Consultant to lead client-facing engagements across SIEM engineering, Microsoft Defender XDR integration, and security operations optimization. You will own design and build work on live engagements, including analytics, detection logic, security integrations, and client-ready deliverables.

You will run workshops, provide SME-level guidance for both technical and non-technical stakeholders, and produce artifacts that clients can operate and