Microsoft Sentinel/XDR Deployment Engineer
Team: Deployment Engineering, Microsoft

BlueVoyant is excited to invite applications for the role of Microsoft Sentinel/XDR Deployment Engineer. In this dynamic position, you will use your expertise in Microsoft Cloud security technologies and SIEM platforms to enable our MDR solutions in customer environments. In this role, you will take the lead in client facing SIEM and XDR technical enablement projects, which includes hands-on deployment of a wide breadth of Microsoft Security and azure solutions.

Responsibilities:

Work on Microsoft Sentinel and/or Defender project implementations for customers (remotely), starting with design and architecture, deployment, and use case tune-up.
Create and develop new detection, automation, and reporting use cases per customer requirements.
Define and assist in the creation of operational and executive security reports and dashboards.
Participate in research and development activities with the goal of process improvement and new product/feature enhancements.
Participate in ongoing support activities for client facing environments to help mature and maintain our MDR practices
Work on XDR integration activities across the Microsoft and Azure product stacks.
Familiarity with Microsoft XDR and Zero Trust Architecture models
Be the lead technical delivery resource within a team for small to large client-facing projects

Qualifications:

At least five years of technical experience with Microsoft Cloud Security technologies or other equivalent SIEM and XDR solutions.
Strong experience with Azure Cloud technologies
Experience in query languages and/or script development (KQL, SPL, SQL, Powershell, etc.)
Knowledge and familiarity of enterprise IT systems in relation to cyber security.
Hands-on engineering experience with SIEM and/or XDR technologies
Excellent communication skills to work in a dynamic and fast-paced team environment

Preferred Competencies:

Hands-on Engineering experience with Microsoft Sentinel
Hands-on engineering experience of Microsoft Defender security
Experienced in customer-facing roles
Expertise in Kusto Query Language
Expertise in Azure Logic Apps, Function apps, and other Azure technologies
incident investigation and response skill set
Proficient in Python, PowerShell or C#/.NET
Proficient in Linux configuration and common administration tasks

About BlueVoyant

At BlueVoyant, we recognize that effective cyber security requires active prevention and defense across both your organization and supply chain. Our proprietary data, analytics, and technology, coupled with deep expertise, works as a force multiplier to secure your full ecosystem. Accuracy! Actionability! Timeliness! Scalability!

Led by CEO, Jim Rosenthal, BlueVoyant’s highly skilled team includes former government cyber officials with extensive frontline experience in responding to advanced cyber threats on behalf of the National Security Agency, Federal Bureau of Investigation, Unit 8200, and GCHQ, together with private sector experts. BlueVoyant services utilize large real-time datasets with industry leading analytics and technologies.

Founded in 2017 by Fortune 500 executives, including Executive Chairman, Tom Glocer, and former Government cyber officials, BlueVoyant is headquartered in New York City and has offices in Maryland, Tel Aviv, San Francisco, London, Budapest, and Latin America.

All employees must be authorized to work in BeNeLux or DACH . BlueVoyant provides equal employment opportunities to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability or genetics. In addition to federal law requirements, BlueVoyant complies with applicable state and local laws governing non-discrimination in employment in every location in which the company has facilities.

BlueVoyant Candidate Privacy Notice

To understand how we secure and manage your personal data upon submitting a job application, please see our Candidate Privacy Notice, which can be found here - Candidate Privacy Notice