Senior Consultant Cyber Engineering

About the role

We are recruiting for an exciting opportunity with Deloitte Technology US (DT - US). Join a community of collaborative colleagues who are passionate about technology and innovation.

Responsibilities

• Maintain ticket management and DevOps activity tracking to ensure accurate work intake, prioritization, and status reporting.
• Monitor and communicate Microsoft product updates; assess and advise on impacts on the environment and customers.
• Create and maintain process documentation (runbooks, SOPs, workflows) to support consistent execution and knowledge transfer.
• Maintain and enforce change control and peer review processes to promote quality, security, and auditability.
• Develop, tune, and support analytics/detection rules, including performance monitoring and optimization.
• Develop, maintain, and optimize playbooks/notebooks, including operational reliability and performance.
• Develop, maintain, and optimize Logic Apps, including operational reliability and performance.
• Develop, maintain, and optimize workbooks and dashboards to support detection engineering and SOC visibility.
• Define and document required fields per data source to enable effective detection and investigation.
• Identify and remediate high-cost/expensive detections to improve signal-to-noise ratio and manage platform consumption.
• Design, build, and support automation solutions that improve efficiency, consistency, and time-to-response across security operations.
• Maintain strong SOC partnerships and provide support for SOC inquiries related to the Azure and Microsoft Defender portals, including troubleshooting and operational guidance.

Qualifications

• Bachelor's degree or equivalent in Computer Science, Computer Engineering, or Business Administration.
• Minimum 8 years of various technology experience.
• Minimum 3 years' cyber security experience within SIEM Administration.
• Hands-on experience with Microsoft Sentinel, including building and tuning analytics rules, hunting queries, workbooks, automation, and managing the SIEM data model and workspace.
• Strong KQL proficiency for threat hunting, detection logic, investigation, and telemetry analysis.