Consultant Cyber Engineering
Deloitte · Las Vegas, NV · 1 wk ago
HybridEngineering$89k–$182k/yrFull-time
About the role
We are recruiting for a position within Deloitte Technology US (DT - US) that supports data source onboarding and quality functions, ensuring security data is accurately ingested into the SIEM for monitoring and threat detection. The role also partners with stakeholders to resolve data quality issues promptly and develops and maintains process documentation.
Responsibilities
- Maintain ticket management and DevOps activity tracking to ensure accurate work intake, prioritization, and status reporting.
- Monitor and communicate Microsoft product updates; assess and advise on impacts on the environment and customers.
- Create and maintain process documentation (runbooks, SOPs, workflows) to support consistent execution and knowledge transfer.
- Maintain and enforce change control and peer review processes to promote quality, security, and auditability.
- Gather requirements for new data sources, define the appropriate connector approach, maintain source documentation, and coordinate stakeholder communications.
- Manage workspace-level ingestion settings, permissions, and keys required for secure data collection.
- Design, develop, configure, and maintain Microsoft Sentinel data connectors, data collection rules, and built-in data source integrations.
- Validate ingested table data against required field definitions and expected schemas.
- Monitor data flow, identify ingestion issues, and troubleshoot failures or gaps in collection.
- Stay current on Microsoft platform changes and assess their impact to the Azure and Sentinel environment.
- Research, design, and implement connector solutions for a variety of data sources.
- Validate that onboarded data is displayed correctly and is usable by end customers.
- Monitor data sources for reliability, completeness, and ongoing health.
- Remediate data quality issues, including missing data and consistency defects.
- Validate past table events to confirm historical data integrity.
- Validate future table events to confirm ongoing ingestion readiness and correctness.
- Maintain and support data connectors and DCRs, including updates for required changes.
- Monitor the performance and health of DCRs, data connectors, Logic Apps, and Functions used for data onboarding.
Qualifications
- Bachelor's degree or equivalent in Computer Science, Computer Engineering, Business Administration.
- Minimum 5 years of various technology experience.
- Minimum 2 years of cyber security experience.
- MS Sentinel SC-200 badge (preferred).
- Hands-on experience with Microsoft Sentinel, Azure Monitor, Log Analytics, Data Collection Rules (DCRs), and data connector administration.
- Hands-on experience scripting, designing, and troubleshooting technical solutions.
- Hands-on experience with Linux, working knowledge of Cloud environments, Azure.