Microsoft Security Automation & Incident Response Engineer - Contract Position

Magnet Forensics develops digital investigative software that acquires, analyzes, and shares digital evidence. The company is seeking a Microsoft Security Automation & Incident Response Engineer to optimize Microsoft security platforms, automate security operations, improve detection coverage, and enhance incident response capabilities in a 3–4 month contract role.

Responsibilities:

• Analyze existing alert triage and incident response processes
• Identify operational bottlenecks and manual activities
• Implement improvements that reduce analyst effort and response times
• Improve overall SOC efficiency and effectiveness
• Tune Microsoft Sentinel analytics rules
• Reduce false positives and alert fatigue
• Create advanced correlation rules and hunting content
• Improve quality and fidelity of security detections
• Design and implement automation for:
• Alert enrichment
• Incident routing
• Ticket creation
• Escalation workflows
• Investigation support
• Standard response actions
• Optimize and integrate:
• Microsoft Sentinel
• Microsoft Defender XDR
• Microsoft Defender for Endpoint
• Microsoft Defender for Identity
• Microsoft Defender for Cloud Apps
• Entra ID
• Zscaler telemetry
• Existing ITSM and ticketing platforms
• Improve incident response processes
• Enhance investigation playbooks
• Develop response automation
• Create operational runbooks and documentation

Requirements:

• 5+ years in Security Operations, Detection Engineering, or Incident Response
• Strong Microsoft Sentinel experience
• Strong Microsoft Defender suite experience
• Advanced KQL skills
• Logic Apps experience
• SOAR automation experience
• SIEM engineering experience
• Security operations workflow optimization experience
• Microsoft Security certifications
• Threat hunting experience
• Detection engineering background
• Experience integrating third-party security telemetry
• Exposure to Purview and DLP technologies