Senior Microsoft Sentinel SIEM Engineer (Hybrid IT/OT)

Oxy; Georgia; On-site; USD 120,000 - 180,000; Full time

Job summary

Oxy is seeking an experienced Expert IT Cyber Security professional to join the IT Cyber Security Operations team in Houston, TX. You will own, optimize, and scale our Microsoft Sentinel SIEM across hybrid IT and OT environments, building automated playbooks and custom analytics while collaborating with SOC for rapid response and compliance monitoring.

The role requires a strong background in SIEM administration, KQL development, and experience with log ingestion from diverse sources.

Qualifications

• Bachelor's degree required in CS/cybersecurity or related field.
• 7+ years administering enterprise SIEM platforms, with 3+ years in Microsoft Sentinel.
• Strong KQL/regex skills and custom detection rule development.

Responsibilities

• Administer and maintain the Microsoft Sentinel SIEM platform (log ingestion, parsing, normalization, rule tuning).
• Develop analytics rules, dashboards, alerts, and threat hunting queries.
• Build automated workflows and mitigation playbooks with Azure Logic Apps.
• Integrate on-prem, cloud, and OT data sources for full visibility.
• Monitor workspace health, costs, and retention strategies.
• Collaborate with SOC for rapid detection and incident response.
• Maintain data quality and support compliance/audit requirements.

Skills

SIEM administration

KQL

Analytics rules

SOAR automation

Azure Sentinel

Threat hunting queries

Log ingestion

Incident response

Education

Bachelor's degree in Computer Science or Cybersecurity

Tools

Azure Logic Apps

Microsoft Sentinel

Job description

Oxy is seeking an experienced Expert IT Cyber Security professional to join the IT Cyber Security Operations team in Houston, TX. You will own, optimize, and scale our Microsoft Sentinel SIEM across hybrid IT and OT environments, building automated playbooks and custom analytics while collaborating with SOC for rapid response and compliance monitoring.

The role requires a strong background in SIEM administration, KQL development, and experience with log ingestion from diverse sources.