Senior Security Engineer

BlueVoyant is seeking a Senior Security Engineer to enable its Managed Detection and Response solutions in customer environments. The role leads enterprise Microsoft Sentinel, Defender XDR, and Azure security deployments, develops detection and reporting use cases, and mentors engineers.

Responsibilities:

• Lead complex Microsoft Sentinel and Defender XDR implementations for customers remotely, from design and architecture through deployment and use case tuning
• Create and develop new detection, automation, and reporting use cases based on customer requirements
• Assess and report on the maturity of client SIEM and XDR deployments, recommending improvements
• Define and assist in building operational and executive security reports and dashboards
• Lead XDR integration activities across the Microsoft and Azure product stacks, applying Microsoft XDR and Zero Trust Architecture principles
• Serve as a strategic and lead technical delivery resource for large and enterprise client-facing projects
• Act as a lead on the Deployment Engineering team, mentoring mid-level and junior engineers
• Participate in research and development activities to drive process improvement and new product and feature enhancements
• Identify and implement improvements to processes and technical enablement
• Support client-facing environments on an ongoing basis to help mature and maintain our MDR practices
• Contribute to knowledge sharing through internal documentation, lunch and learns, and public-facing blogs

Requirements:

• US Citizenship Required
• 8+ years of technical experience enabling security technologies, with a focus on Microsoft Cloud Security or equivalent SIEM and XDR solutions
• Strong hands-on experience deploying and/or managing Microsoft Sentinel
• Strong hands-on experience deploying and/or managing Microsoft Defender security products (e.g., Defender for Endpoint, Identity, Cloud Apps, Office 365, Defender for Cloud)
• Hands-on engineering experience with SIEM and/or XDR technologies in enterprise production environments
• Strong experience with Azure Cloud technologies
• Experience with query languages and/or script development (KQL, SPL, SQL, PowerShell, or similar)
• Knowledge of enterprise IT systems as they relate to cybersecurity
• Familiarity with Microsoft XDR and Zero Trust Architecture models
• Excellent communication skills and the ability to thrive in a dynamic, fast-paced team environment
• Bachelor's degree in a related field or equivalent professional experience and certifications
• All employees must be authorized to work in the United States of America
• Expertise in Kusto Query Language (KQL), including Sentinel Analytic Rules and Defender Custom Detection Rules
• Expertise in Azure Logic Apps, Function Apps, and other Azure technologies
• Expertise with Microsoft 365 productivity solutions (Exchange Online, Teams, SharePoint)
• Expertise with Microsoft Intune
• Experience in customer-facing roles
• Incident investigation and response skills
• Proficiency in Python, PowerShell, or C#/.NET
• Proficiency in Linux configuration and common administration tasks
• Relevant Microsoft certifications (e.g., SC-200, AZ-500) are a plus