Senior Microsoft Sentinel SIEM Expert

OXY, Inc.; Houston (TX); On-site; USD 120,000 - 180,000; Full time

Job summary

Oxy in Houston, Texas, is seeking an experienced Expert IT Cyber Security professional to join the IT Cyber Security Operations team. The role focuses on owning, optimizing, and scaling Microsoft Sentinel across hybrid IT and OT environments, ensuring robust threat detection and rapid response.

The successful candidate will manage end-to-end Sentinel data ingestion, ASIM parsing, custom KQL analytics, and automated playbooks with Azure Logic Apps, while collaborating with SOC analysts and

Qualifications

• Bachelor's degree in computer science, cybersecurity, or a related area of study.
• 7+ years administering enterprise SIEM platforms, with 3+ years hands-on with Microsoft Sentinel.
• Strong proficiency in KQL and detection rule development.
• Experience with log ingestion, parsing, and normalization from Windows, Linux, cloud, and OT sources.
• Familiarity with MITRE ATT&CK and threat detection methodologies.
• Understanding incident response workflows and SOAR integration.
• Excellent communication and the ability to explain threats to diverse audiences.
• Ability to work in a collaborative team using Waterfall and Scrum.

Responsibilities

• Administer and maintain the Microsoft Sentinel SIEM platform, including log ingestion, ASIM parsing, normalization, and analytic rule tuning.
• Develop and manage custom analytics rules, Workbooks, threat hunting queries, and alerts to detect security threats.
• Design, build, and maintain automated workflows and mitigation playbooks using Azure Logic Apps and Sentinel Automation Rules.
• Integrate data sources across on-prem, cloud, and OT environments for comprehensive visibility.
• Monitor workspace health, performance, ingestion costs, and storage utilization.
• Collaborate with SOC analysts, incident responders, and threat hunters to enhance detection.
• Regularly review log sources and parsing accuracy to ensure data quality.
• Support compliance and audit requirements with documentation and reporting.

Skills

Microsoft Sentinel

KQL

SIEM Administration

Threat Detection

SOAR Playbooks

Log Ingestion

OT Security

Incident Response

Communication

Project Mgmt

Education

Bachelor's degree in CS/Cybersecurity

Tools

Azure Logic Apps

Log Analytics

Azure Monitor

Kusto

Job description

Oxy in Houston, Texas, is seeking an experienced Expert IT Cyber Security professional to join the IT Cyber Security Operations team. The role focuses on owning, optimizing, and scaling Microsoft Sentinel across hybrid IT and OT environments, ensuring robust threat detection and rapid response.

The successful candidate will manage end-to-end Sentinel data ingestion, ASIM parsing, custom KQL analytics, and automated playbooks with Azure Logic Apps, while collaborating with SOC analysts and