About the job
Microsoft Sentinel/XDR Deployment Engineer
Team: Deployment Engineering, Microsoft
Remote in BeNeLux or DACH
BlueVoyant is excited to invite applications for the role of Microsoft Sentinel/XDR Deployment Engineer. In this dynamic position, you will use your expertise in Microsoft Cloud security technologies and SIEM platforms to enable our MDR solutions in customer environments. In this role, you will take the lead in client facing SIEM and XDR technical enablement projects, which includes hands-on deployment of a wide breadth of Microsoft Security and azure solutions.
Responsibilities:
- Work on Microsoft Sentinel and/or Defender project implementations for customers (remotely), starting with design and architecture, deployment, and use case tune-up.
- Create and develop new detection, automation, and reporting use cases per customer requirements.
- Define and assist in the creation of operational and executive security reports and dashboards.
- Participate in research and development activities with the goal of process improvement and new product/feature enhancements.
- Participate in ongoing support activities for client facing environments to help mature and maintain our MDR practices
- Work on XDR integration activities across the Microsoft and Azure product stacks.
- Familiarity with Microsoft XDR and Zero Trust Architecture models
- Be the lead technical delivery resource within a team for small to large client-facing projects
Qualifications:
- At least five years of technical experience with Microsoft Cloud Security technologies or other equivalent SIEM and XDR solutions.
- Strong experience with Azure Cloud technologies
- Experience in query languages and/or script development (KQL, SPL, SQL, Powershell, etc.)
- Knowledge and familiarity of enterprise IT systems in relation to cyber security.
- Hands-on engineering experience with SIEM and/or XDR technologies
- Excellent communication skills to work in a dynamic and fast-paced team environment
Preferred Competencies:
- Hands-on Engineering experience with Microsoft Sentinel
- Hands-on engineering experience of Microsoft Defender security
- Experienced in customer-facing roles
- Expertise in Kusto Query Language
- Expertise in Azure Logic Apps, Function apps, and other Azure technologies
- incident investigation and response skill set
- Proficient in Python, PowerShell or C#/.NET
- Proficient in Linux configuration and common administration tasks
About BlueVoyant
At BlueVoyant, we recognize that effective cyber security requires active prevention and defense across both your organization and supply chain. Our proprietary data, analytics, and technology, coupled with deep expertise, works as a force multiplier to secure your full ecosystem. Accuracy! Actionability! Timeliness! Scalability!
Led by CEO, Jim Rosenthal, BlueVoyant’s highly skilled team includes former government cyber officials with extensive frontline experience in responding to advanced cyber threats on behalf of the National Security Agency, Federal Bureau of Investigation, Unit 8200, and GCHQ, together with private sector experts. BlueVoyant services utilize large real-time datasets with industry leading analytics and technologies.
Founded in 2017 by Fortune 500 executives, including Executive Chairman, Tom Glocer, and former Government cyber officials, BlueVoyant is headquartered in New York City and has offices in Maryland, Tel Aviv, San Francisco, London, Budapest, and Latin America.
All employees must be authorized to work in BeNeLux or DACH. BlueVoyant provides equal employment opportunities to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability or genetics. In addition to federal law requirements, BlueVoyant complies with applicable state and local laws governing non-discrimination in employment in every location in which the company has facilities.
