Senior Microsoft Sentinel SIEM Architect (Hybrid IT/OT)

Occidental Petroleum Corporation; Houston, Northern (TX, KY); Hybrid; USD 140,000 - 190,000; Full time

Job summary

Occidental Petroleum Corporation is seeking an experienced Expert IT Cyber Security professional to join the IT Cyber Security Operations team in Houston, TX. The role focuses on owning, optimizing, and scaling the Microsoft Sentinel SIEM across hybrid IT and OT environments.

You will manage end-to-end Sentinel administration, build custom analytics rules, and develop automated SOAR playbooks while collaborating with SOC to deliver rapid response and robust compliance monitoring.

Qualifications

• Bachelor’s degree in computer science, cybersecurity, or a related area of study.
• 7+ years of experience administering enterprise SIEM platforms, with 3+ years on Microsoft Sentinel.
• Strong proficiency in KQL, regex, or other SIEM query languages.
• Experience with log ingestion, parsing, and normalization from diverse sources (Windows, Linux, firewalls, cloud services, OT).
• Familiarity with MITRE ATT&CK framework and incident response workflows.
• Ability to work with sensitive information with confidentiality and professionalism.

Responsibilities

• Administer and maintain the Microsoft Sentinel SIEM platform, including log ingestion and rule tuning.
• Develop and manage custom analytics rules, dashboards, and alerts to detect threats.
• Design and maintain automated workflows using Azure Logic Apps and Sentinel playbooks.
• Integrate data sources across on-prem, cloud, and OT environments for visibility.
• Monitor workspace storage costs and data retention policies.
• Collaborate with SOC analysts and threat hunters to enhance detection and response.

Skills

KQL proficiency (Kusto)

Analytical troubleshooting

Independent work

Strong communication

Education

Bachelor's degree in computer science/cybersecurity

Tools

Microsoft Sentinel

Azure Logic Apps

Kusto Query Language (KQL)

Job description

Occidental Petroleum Corporation is seeking an experienced Expert IT Cyber Security professional to join the IT Cyber Security Operations team in Houston, TX. The role focuses on owning, optimizing, and scaling the Microsoft Sentinel SIEM across hybrid IT and OT environments.

You will manage end-to-end Sentinel administration, build custom analytics rules, and develop automated SOAR playbooks while collaborating with SOC to deliver rapid response and robust compliance monitoring.