Senior Security Engineer - Microsoft Sentinel

About the role

An organization is looking for an experienced Senior Security Engineer with deep expertise in SIEM/SOAR deployment, migration and advanced security engineering. The role centres on designing, implementing and optimising Microsoft Sentinel solutions, including custom integrations, automation and AI-assisted security operations.

Key responsibilities

• Lead end-to-end deployment and migration of SIEM solutions to Microsoft Sentinel
• Design, implement and optimise SIEM and SOAR architectures within Microsoft Sentinel
• Develop complex custom detection rules using advanced KQL (Kusto Query Language)
• Build and maintain custom SOAR automation workflows using Logic Apps
• Develop Codeless Connector Framework (CCF) solutions for integrating custom data sources and applications
• Integrate SAP systems with Microsoft Sentinel and design custom detection use cases
• Leverage Microsoft Security Copilot and GitHub Copilot for AI-assisted content creation during migration and optimisation
• Implement data ingestion pipelines with tools such as Logstash, NXLog or similar, and integrate logs into the Microsoft Sentinel Data Lake
• Develop integrations for custom applications (e.g. Oracle Fusion) via APIs and Logic Apps, and create Azure Function Apps for advanced data integration
• Design and implement ASIM parsers, and continuously improve detection coverage, automation and response capabilities

Required profile

• Strong hands-on experience with Microsoft Sentinel SIEM and SOAR
• Proven experience deploying and migrating SIEM to Microsoft Sentinel
• Experience building custom connectors and ingestion pipelines, and integrating enterprise applications such as SAP and Oracle Fusion with SIEM platforms
• Preferred: cloud security experience (Azure Security stack), knowledge of threat detection, incident response and security operations, and relevant certifications such as SC-200 or AZ-500

Required skills

• Advanced KQL for detection engineering
• Logic Apps, Azure Functions and API integrations
• Logstash, NXLog or equivalent data ingestion tools
• ASIM architecture and parser development
• Familiarity with Microsoft Security Copilot and generative AI capabilities