Microsoft Sentinel Subject Matter Expert

Remote location: Telecommute
Job type: Contract
Work hours: 9am to 5pm
Education: Bachelors

Responsibilities

• Design, implement, and maintain Microsoft Sentinel SIEM/SOAR solutions.
• Ingest and manage security data sources into Azure Log Analytics (Syslog, CEF, APIs, Threat Intelligence feeds).
• Develop and tune KQL queries, analytics rules, alerts, and dashboards.
• Build automated response playbooks using Azure Logic Apps and Microsoft Copilot for Security.
• Perform threat hunting, incident investigation, and response activities with SOC teams.
• Implement and manage Azure security controls aligned with Zero Trust principles.
• Assess vulnerabilities, analyze attacker TTPs, and support remediation efforts.
• Support cloud security governance, compliance, and audit activities, including FedRAMP and FISMA requirements.
• Provide security architecture guidance and contribute to cloud security strategy initiatives.

Requirements

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related field.
• 5+ years of cybersecurity experience, including 5+ years of hands-on Microsoft Sentinel administration and engineering.
• Strong experience with Microsoft Sentinel, Azure Log Analytics, Kusto Query Language (KQL), Azure Logic Apps, Microsoft Defender Suite, Azure Security and Identity Services, Privileged Access Management (PAM), CI/CD security and application security scanning.
• Experience configuring and securing enterprise Azure environments.
• Knowledge of Zero Trust architecture and cloud security best practices.

Qualifications

• Preferred Qualifications:
  • Azure Government (GovCloud) experience.
  • Experience supporting FISMA, FedRAMP, and NIST compliance frameworks.
  • Relevant certifications such as CISSP, CCSP, Microsoft Azure Security Engineer Associate, Microsoft Cybersecurity Architect Expert.
  • Experience collaborating with government clients, auditors, and executive stakeholders.
• Additional Technical Expertise:
  • Microsoft Defender XDR: Defender for Endpoint, Office 365, Identity, and Cloud Apps.
  • Data Protection: Microsoft Purview, MIP, DLP, Key Vault.
  • Identity & Access Management: Entra ID (Azure AD), PIM, Conditional Access, Azure Lighthouse.
  • Zero Trust Cloud Security: Azure Security Services, M365 Security, Multi-Cloud IAM.

Pay

$60 - 100 per hour

Benefits

• Medical, prescription, dental, and vision insurance.
• AD&D and life insurance offerings.
• Short-term disability.
• 401K plan (all benefits are based on eligibility).