Senior Security Analyst - Remote, MSSP & Sentinel Expert

Aprio; Atlanta (GA); Hybrid; USD 94,000 - 153,000; Full time

Benefits offered by this job

Medical, Dental, Vision Insurance

401k with Profit Sharing

Parental Leave

Tuition Assistance

Discretionary incentives

Remote/hybrid options

Job summary

Aprio is seeking a Senior Security Analyst to monitor, triage, and respond to threats across managed security clients using the Microsoft security stack. You’ll work as the first line of defense across client environments, primarily with Microsoft Sentinel and Defender XDR, handling after-hours coverage and contributing to detection and automation improvements.

This role involves client communications, incident reporting, and escalation to senior teams.

Qualifications

• 3–4 years of experience in a SOC, MSSP, MDR, or IT security operations role.
• Hands-on production experience with Microsoft Sentinel and Microsoft Defender XDR.
• Working knowledge of KQL.
• Solid understanding of Microsoft Entra ID, Microsoft 365, Windows endpoints, networking fundamentals, and common attack techniques (MITRE ATT&CK).
• Clear written and verbal communication skills, including composure during active client incidents.
• Availability and willingness to work evenings, weekends, holidays, and on-call rotations.

Responsibilities

• Monitor alerts and incidents across client tenants in Microsoft Sentinel and Defender XDR.
• Triage incidents and validate enrichment; meet SLA targets for acknowledgment and containment.
• Investigate sign-ins, risky users, and conditional access failures in Microsoft Entra ID.
• Write and tune KQL queries for threat hunting and detection rule development.
• Trigger and manage automated containment playbooks per client security matrix.
• Operate Sentinel automation rules and Logic Apps playbooks.
• Provide clear incident summaries and remediation recommendations.

Skills

SOC/MSSP experience

KQL

Entra ID / MS 365

Incident communication

On-call availability

Education

Bachelor's degree in cybersecurity or related field

Tools

Microsoft Sentinel

Defender XDR

Logic Apps

PowerShell

Python

Job description

Aprio is seeking a Senior Security Analyst to monitor, triage, and respond to threats across managed security clients using the Microsoft security stack. You’ll work as the first line of defense across client environments, primarily with Microsoft Sentinel and Defender XDR, handling after-hours coverage and contributing to detection and automation improvements.

This role involves client communications, incident reporting, and escalation to senior teams.