Senior Security Ops Engineer - Remote, Microsoft Sentinel

CruiTek, LLC; United States; Remote; USD 140,000 - 180,000; Full time

Benefits offered by this job

Remote work

Unlimited growth

Job summary

CruiTek, LLC is seeking a Senior Security Operations Engineer for a 100% remote role in the United States. You will lead day-to-day security operations, manage alerts, investigations, and SIEM migration projects in a Microsoft-native environment, with strong client-facing communication.

The ideal candidate has 5+ years in security operations, hands-on Microsoft Sentinel, Defender for Endpoint, Entra ID, and Azure log analysis, plus the ability to write KQL and tune analytics rules.

Qualifications

• Minimum 5 years of Security Operations experience.
• Minimum 5 years in a Senior, Lead, or Tier 3 Security Operations role.
• Microsoft Sentinel production experience.
• Ability to write KQL queries independently.
• Analytics rule creation and tuning.
• Experience working with Sentinel data connectors.
• Microsoft Defender for Endpoint
• Microsoft Defender XDR
• Entra ID sign-in and audit log analysis
• Microsoft 365 and Azure log investigation experience

Responsibilities

• Lead day-to-day security operations with minimal ramp-up time.
• Support Microsoft Sentinel operations, incident investigations, alert triage, threat analysis, phishing investigations and identity event investigations.
• Perform security monitoring and SIEM migration-related activities.
• Communicate findings clearly through written documentation and reports.
• Operate independently in a Microsoft-native security environment.

Skills

Security Operations

Senior / Lead SOC

Microsoft Sentinel

KQL queries

Analytics rule creation

Sentinel data connectors

Entra ID sign-in / audit log analysis

M365 & Azure log investigation

Microsoft Defender for Endpoint

Microsoft Defender XDR

Tools

Microsoft Sentinel

KQL

Sentinel data connectors

LogRhythm

Sentinel‑as‑Code

Infrastructure‑as‑Code

Privileged Access Management

Microsoft Purview

SC-200

AZ-500

GCIA

GCIH

GCFA

CISSP

Job description

CruiTek, LLC is seeking a Senior Security Operations Engineer for a 100% remote role in the United States. You will lead day-to-day security operations, manage alerts, investigations, and SIEM migration projects in a Microsoft-native environment, with strong client-facing communication.

The ideal candidate has 5+ years in security operations, hands-on Microsoft Sentinel, Defender for Endpoint, Entra ID, and Azure log analysis, plus the ability to write KQL and tune analytics rules.