13 дней назад
SOC Engineer (Cybersecurity)
Вакансия из Hirify Global, списка международных tech-компанийДля мэтча и отклика нужен Plus
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
Текст:
TL;DR
SOC Engineer (Cybersecurity): Onboarding customers into managed security services by integrating security telemetry, configuring Microsoft security services, and maintaining reliable security tooling with an accent on Microsoft Sentinel, Defender XDR, Entra ID, and multi-cloud data sources. Focus on troubleshooting complex cloud, identity, network, Windows, and Linux integrations, automating repeatable onboarding workflows, and supporting federal and regulated environments.
Location: Remote within the USA; must be a U.S. citizen and work EST hours from 8:30 AM to 5:30 PM
Company
provides managed security services and supports customers in federal and regulated environments.
What you will do
- Lead customer onboarding from discovery and requirements through configuration, validation, and handoff.
- Configure and integrate Microsoft Sentinel, Defender XDR, Entra ID, Azure Monitor, and Log Analytics.
- Onboard and validate telemetry from identity, endpoint, network, SaaS, and multi-cloud sources across Azure, AWS, and Google Workspace or Google Cloud.
- Integrate and troubleshoot log sources across Microsoft Sentinel, Splunk, SentinelOne, IBM QRadar, and similar SIEM platforms.
- Build scripts and automation to make onboarding and security operations repeatable.
- Document technical solutions and work directly with customer stakeholders to resolve onboarding blockers.
Requirements
- 5+ years of experience in IT infrastructure, cloud, or security engineering, including 3+ years of hands-on Microsoft Azure experience.
- 2+ years of experience with Microsoft Sentinel or a comparable enterprise SIEM, including data-source onboarding.
- Strong knowledge of Sentinel, Defender XDR, Entra ID, Azure Lighthouse, GDAP, Azure Monitor, and Log Analytics.
- Experience onboarding identity providers, endpoints, firewalls, network devices, SaaS applications, Syslog/CEF, API, and agent-based integrations.
- Proficiency in KQL and PowerShell or Python, with troubleshooting skills across Windows, Linux, networking, and identity.
- At least one current AZ-500 or SC-200 certification is required, along with strong written and customer-facing communication skills.
Nice to have
- Experience in an MSSP, MDR, or security consulting environment.
- Experience supporting federal or defense-industrial-base customers, including GCC and GCC High environments.
- Experience with EDR/XDR platforms such as CrowdStrike or SentinelOne.
- Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
Culture & Benefits
- Remote work within the USA during EST business hours.
- Work directly with customer stakeholders and internal security teams.
- Exposure to federal, regulated, and defense-industrial-base security environments.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →
Музыка
Осень
Поддержка