🛠 Tech Stack

💼 About This Role

You'll manage and optimize Microsoft Sentinel SIEM operations to strengthen threat detection and incident response for a federal-facing program. Your core impact will be ensuring reliable log ingestion, normalization, and analytics across cloud and on-premise environments. This role stands out for its focus on high-impact federal security with advanced tools.

🎯 What You'll Do

• Manage and optimize Microsoft Sentinel SIEM operations
• Develop detection rules, correlation logic, and dashboards
• Support incident response and threat hunting activities
• Coordinate onboarding of new log sources from cloud environments

📋 Requirements

• 6+ years in security engineering or SOC/SIEM roles
• Hands-on experience with Microsoft Sentinel
• Proficiency in KQL for building queries and analytics
• Active Public Trust clearance required

✨ Nice to Have

• CISSP, GCIH, or GCIA certification
• Experience with AWS and Azure security logs
• Familiarity with NIST frameworks

🎁 Benefits & Perks

• 🏠 Fully remote work arrangement
• 🛡️ High-impact federal security programs
• 💵 Competitive compensation aligned with clearance
• 📈 Professional development including certifications

📨 Hiring Process

Estimated timeline: 2-4 weeks · AI estimate

1. 1Recruiter Screen· 30 min
2. 2Technical Interview· 60 min
3. 3Team Interview· 45 min

🚩 Heads Up

• Requires active clearance, limiting candidate pool
• No salary range provided in listing