REMOTE / PART TIME Project
Global Solutions Group (GSG) is seeking a Junior Microsoft Sentinel Engineer to support an active client migration from a legacy cloud-based SIEM platform to Microsoft Sentinel. This role will work alongside a team of experienced security engineers and architects and will contribute to the deployment, tuning, and operationalization of Sentinel within the client's environment.
This is an excellent opportunity for an early-career cybersecurity professional looking to gain hands-on experience with SIEM migration efforts, cloud-native security operations, detection engineering, and security automation.
The selected candidate will support a larger project team consisting of at least two additional security professionals and will assist with use case migration, data onboarding, rule development, and validation activities throughout the engagement
Primary Responsibilities
- Assist with the migration of security monitoring capabilities from a legacy SaaS SIEM platform into Microsoft Sentinel.
- Support onboarding and validation of data sources, connectors, and log ingestion pipelines.
- Help develop, tune, and maintain Sentinel Analytics Rules and detection logic.
- Assist with mapping alerts and detections to the MITRE ATT&CK framework.
- Participate in detection engineering activities, including use case conversion and tuning.
- Support the creation and testing of Microsoft Sentinel Workbooks, Dashboards, and Hunting Queries.
- Assist with implementation and maintenance of Logic Apps and Sentinel automation playbooks.
- Participate in troubleshooting data collection, alerting, and automation issues.
- Document migration activities, configurations, and operational procedures.
- Collaborate with senior engineers, architects, and client stakeholders throughout the migration effort.
- Support knowledge transfer activities and operational readiness efforts.
Required Qualifications
- 1-3 years of cybersecurity, SOC, SIEM, or security engineering experience.
- Experience with Microsoft Sentinel analytics rules, workbooks, and hunting queries.
- Exposure to detection engineering concepts and use case development.
- Basic understanding of SIEM concepts, log management, and security monitoring.
- Familiarity with Kusto Query Language (KQL).
- Understanding of common cybersecurity attack techniques and threat detection methodologies.
- Basic knowledge of Azure services and cloud security concepts.
- Ability to analyze security events and investigate alerts.
- Strong written and verbal communication skills.
- Ability to work effectively as part of a collaborative project team.
Preferred Qualifications
- Familiarity with the MITRE ATT&CK framework.
- Experience working with Logic Apps and security automation workflows.
- Knowledge of Microsoft Defender XDR, Azure Monitor, or related Microsoft security technologies.
- Previous SOC analyst experience.
- Exposure to SIEM migration projects or security platform implementations.
- Relevant certifications such as:
- Microsoft SC-200
- Microsoft AZ-900
- Microsoft SC-900
- CompTIA Security+