-
Trusted Technical Advisor: Lead security strategy, architecture, and modernization initiatives with a specialization in Sentinel and Defender for Cloud. Collaborate with CISOs, Security Architects, and platform teams to design, deploy, optimize, and scale security solutions across SecOps, Identity, Cloud, Data, and AI Security, ensuring positive customer outcomes through operational excellence.
-
Sentinel: Architect, deploy, and operationalize Sentinel, including designing workspaces, multi-tenant setups, AMA and DCR architecture, onboarding connectors, KQL detection engineering, incident workflows, UEBA, threat intelligence, hunting, automation rules, and Logic Apps playbooks.
-
Defender for Cloud: Enhance the adoption of Defender CSPM and Cloud Workload Protection Platform (CWPP) across various domains, including servers, containers, Kubernetes, databases, and applications. Oversee secure score improvement, attack path analyses, regulatory compliance, governance via Azure Policy, agentless scanning, and DevOps security.
-
SIEM Modernization: Facilitate migrations from third-party SIEM platforms to Sentinel, managing assessments, data onboarding, content translation, parallel-run strategies, validations, and cutovers.
-
AI Security & Security Operations: Assist customers in securing AI workloads using Security Copilot, Sentinel Data Lake, Defender for AI, and related tools. Promote AI-assisted detection and governance for AI applications and data.
-
Consumption & Operational Health: Advance adoption and operational excellence through technical plans, workload onboarding, health assessments, and continuous optimization reviews, improving detection coverage and overall platform health.
-
Unified Security Architecture: Design end-to-end security architectures that integrate Sentinel, Defender for Cloud, and other security services into a cohesive security operations model.
-
Customer Delivery: Organize architecture workshops, design sessions, proofs of concept, health assessments, and hands-on enablement to enhance customer success.
-
Engineering Partnership: Address product gaps, guide roadmap direction, capture customer feedback, and develop reusable guidance for both field and product teams.
-
Account Collaboration: Partner with account teams, specialists, and services to translate architecture decisions into deployed and operationalized solutions.
-
Bachelor's degree in Computer Science, Information Technology, Engineering, Cybersecurity, or a related field, along with 5+ years of relevant experience or equivalent practical experience.
-
Hands-on experience with designing, deploying, and operating Sentinel in enterprise settings, focusing on security monitoring and large-scale SOC operations.
-
Experience leading SIEM transformations and migrations to Sentinel, involving assessments, data onboarding, and production transitions.
-
Proven experience with implementing Defender for Cloud across Azure and multi-cloud environments.
-
Strong understanding of Azure Landing Zones and enterprise cloud security measures, including Azure Policy and Zero Trust principles.
-
Proficient in Azure network security architecture, including Azure Firewall, ASGs, and micro-segmentation.
-
Experience working with Security Operations Centers (SOCs) and driving SOC transformation initiatives.
-
Deep expertise in security technologies and their integration into unified security architectures.
-
Strong background in security operations, threat hunting, incident response, and automation.
-
Knowledge of securing AI-enabled environments and associated security measures.
-
Excellent automation and scripting proficiency using KQL, PowerShell, Python, and other related technologies.
-
Familiarity with industry security frameworks such as NIST, CIS, ISO 27001, and PCI DSS.
-
Experience embedding security practices into DevSecOps and working collaboratively with engineering and operational teams.
This position will remain open for a minimum of 5 days, and applications will be accepted on an ongoing basis until filled.
