Microsoft Security Automation & Incident Response Engineer - Contract Position

Magnet Forensics is a global leader in the development of digital investigative software. They are seeking a highly skilled Microsoft Security Automation & Incident Response Engineer to enhance their security operations program by optimizing Microsoft's security platform and automating tasks to improve efficiency and incident response capabilities.

Responsibilities:

• Analyze existing alert triage and incident response processes
• Identify operational bottlenecks and manual activities
• Implement improvements that reduce analyst effort and response times
• Improve overall SOC efficiency and effectiveness
• Tune Microsoft Sentinel analytics rules
• Reduce false positives and alert fatigue
• Create advanced correlation rules and hunting content
• Improve quality and fidelity of security detections
• Design and implement automation for:
• Alert enrichment
• Incident routing
• Ticket creation
• Escalation workflows
• Investigation support
• Standard response actions
• Optimize and integrate:
• • Microsoft Sentinel
• • Microsoft Defender XDR
• • Microsoft Defender for Endpoint
• • Microsoft Defender for Identity
• • Microsoft Defender for Cloud Apps
• • Entra ID
• • Zscaler telemetry
• • Existing ITSM and ticketing platforms
• Improve incident response processes
• Enhance investigation playbooks
• Develop response automation
• Create operational runbooks and documentation

Requirements:

• 5+ years in Security Operations, Detection Engineering, or Incident Response
• Strong Microsoft Sentinel experience
• Strong Microsoft Defender suite experience
• Advanced KQL skills
• Logic Apps experience
• SOAR automation experience
• SIEM engineering experience
• Security operations workflow optimization experience
• Microsoft Security certifications
• Threat hunting experience
• Detection engineering background
• Experience integrating third-party security telemetry
• Exposure to Purview and DLP technologies