Senior Microsoft Sentinel & EDR Consultant

Deloitte France; San Francisco (CA); On-site; USD 105,000 - 208,000; Full time

Job summary

Deloitte Cyber seeks a Senior Consultant, Sentinel to architect, implement, and optimize Microsoft Sentinel, Defender for Endpoint, and EDR across Azure, AWS, and Google Cloud environments. You will develop Kusto queries, dashboards, and automation playbooks for proactive threat hunting and incident response.

Responsibilities include migrations from legacy SIEM, end-to-end event analysis, and creating reports and lifecycle documentation for clients.

Qualifications

• 4+ years of experience architecting, designing, and implementing Microsoft Sentinel, endpoint detection and response, or extended detection and response solutions in enterprise environments
• 4+ years of experience with security information and event management, detection engineering, log management, or security operations in Azure, Amazon Web Services, or Google Cloud Platform environments
• Experience developing Kusto Query Language queries and functions, analytical rules, dashboards, workbooks, and automation playbooks in Microsoft Sentinel
• Experience migrating from legacy security information and event management platforms to Microsoft Sentinel, including parser development, custom data source integration, and log collection or forwarder deployment
• Experience with scripting or automation tools such as PowerShell, Python, or Terraform for security operations or platform administration
• Ability to travel 50%, on average, based on the work you do and the clients and industries/sectors you serve
• Limited immigration sponsorship may be available

Responsibilities

• Architecting, designing, and implementing Microsoft Sentinel, Defender for Endpoint, and EDR solutions across Azure, AWS, and GCP environments
• Developing KQL queries, functions, dashboards, workbooks, and automation playbooks for monitoring, detection engineering, threat hunting, and incident response
• Supporting migrations from legacy SIEM platforms to Microsoft Sentinel, including log onboarding, parser development, custom data source integration, log forwarder deployment, and log collection optimization
• End-to-end event analysis, incident detection, escalation management, false positive tuning, and runbook-driven response activities
• Implementing advanced Microsoft Sentinel capabilities, including threat intel integration, UEBA, custom dashboards, workbook development, and SaaS connections
• Creating technical reports, security visuals, operating procedures, and lifecycle documentation for client security and operations

Skills

Work independently

Team collaboration

Written communication

Verbal communication

Attention to detail

Professional relationships

Project leadership

Task prioritization

Interpersonal skills

Meet deadlines

Provide guidance

Education

Bachelor's degree in Computer Science, Cyber Security, Information Security, Engineering, or Information Technology

Tools

PowerShell

Python

Terraform

Job description

Deloitte Cyber seeks a Senior Consultant, Sentinel to architect, implement, and optimize Microsoft Sentinel, Defender for Endpoint, and EDR across Azure, AWS, and Google Cloud environments. You will develop Kusto queries, dashboards, and automation playbooks for proactive threat hunting and incident response.

Responsibilities include migrations from legacy SIEM, end-to-end event analysis, and creating reports and lifecycle documentation for clients.