Senior Security Operations Engineer-Remote

CruiTek, LLC; United States; Remote; USD 140,000 - 180,000; Full time

Benefits offered by this job

Remote work

Unlimited growth

Job summary

CruiTek, LLC is seeking a Senior Security Operations Engineer for a 100% remote role in the United States. You will lead day-to-day security operations, manage alerts, investigations, and SIEM migration projects in a Microsoft-native environment, with strong client-facing communication.

The ideal candidate has 5+ years in security operations, hands-on Microsoft Sentinel, Defender for Endpoint, Entra ID, and Azure log analysis, plus the ability to write KQL and tune analytics rules.

Qualifications

• Minimum 5 years of Security Operations experience.
• Minimum 5 years in a Senior, Lead, or Tier 3 Security Operations role.
• Microsoft Sentinel production experience.
• Ability to write KQL queries independently.
• Analytics rule creation and tuning.
• Experience working with Sentinel data connectors.
• Microsoft Defender for Endpoint
• Microsoft Defender XDR
• Entra ID sign-in and audit log analysis
• Microsoft 365 and Azure log investigation experience

Responsibilities

• Lead day-to-day security operations with minimal ramp-up time.
• Support Microsoft Sentinel operations, incident investigations, alert triage, threat analysis, phishing investigations and identity event investigations.
• Perform security monitoring and SIEM migration-related activities.
• Communicate findings clearly through written documentation and reports.
• Operate independently in a Microsoft-native security environment.

Skills

Security Operations

Senior / Lead SOC

Microsoft Sentinel

KQL queries

Analytics rule creation

Sentinel data connectors

Entra ID sign-in / audit log analysis

M365 & Azure log investigation

Microsoft Defender for Endpoint

Microsoft Defender XDR

Tools

Microsoft Sentinel

KQL

Sentinel data connectors

LogRhythm

Sentinel‑as‑Code

Infrastructure‑as‑Code

Privileged Access Management

Microsoft Purview

SC-200

AZ-500

GCIA

GCIH

GCFA

CISSP

Job description

Senior Security Operations Engineer-Remote

• United States, United States

Senior Security Operations Engineer-Remote

No 3rd PARTIES or Sponsorships of any kind

100% Remote

Great Company

Unlimited Growth

*4 Months

*MUST be very professional and have great communication skills-Client facing position

This is a hands-on security operations role requiring a senior-level resource who can independently manage day-to-day security operations activities with minimal ramp‑up time.

The selected resource will support Microsoft Sentinel operations , incident investigation, alert triage, threat analysis, phishing investigations, identity event investigations, security monitoring, and SIEM migration‑related activities. Candidates should have demonstrated experience managing investigations from initial alert through resolution and communicating findings clearly through written documentation.

This is a Sr Level Position: Candidates should have strong hands‑on Microsoft Sentinel experience and be comfortable operating independently within a Microsoft‑native security environment.

Skills Must Have

• Minimum 5 years of Security Operations or SOC experience
• Minimum 5 years in a Senior, Lead, or Tier 3 Security Operations role
• Microsoft Sentinel production experience
• Ability to write KQL queries independently
• Analytics rule creation and tuning
• Experience working with Sentinel data connectors
• Microsoft Defender for Endpoint
• Microsoft Defender XDR
• Entra ID sign-in and audit log analysis
• Microsoft 365 and Azure log investigation experience

Skills Nice to Have

• SIEM migration experience
• LogRhythm to Microsoft Sentinel migration experience
• Law firm or professional services experience
• Experience in regulated or compliance‑driven environments
• Detection engineering experience
• Sentinel‑as‑Code experience
• Infrastructure‑as‑Code experience
• Privileged Access Management experience
• Data discovery experience
• Microsoft Purview experience
• SC-200 certification
• AZ-500 certification
• GCIA certification
• GCIH certification
• GCFA certification
• CISSP certification