Sr. Cybersecurity Engineering Consultant - SIEM/Microsoft (AIR)

About the role

LevelBlue’s Professional Services Organization is hiring a Senior Cybersecurity Engineering Consultant for client-facing delivery across SIEM engineering, Microsoft security advisory and implementation, and security operations optimization. This is not an analyst role. You will own design and build work on live engagements: analytics, detection logic, security integrations, technical advisory, and client-ready delivery artifacts. You will run workshops, provide SME-level guidance for technical and non-technical stakeholders, and leave clients with something they can operate. You will operate independently and in mixed teams, manage your own work across concurrent clients, and improve practice proposals and delivery assets.

Responsibilities

• Deliver engagements across a range of service lines.
• Lead SIEM design and implementation on greenfield SOC builds and brownfield optimization: data-source onboarding (e.g., telemetry analysis, ingestion design, parsing and normalization, custom connectors), analytics rules, hunting queries, automation rules and playbooks, workbooks, incident process alignment, and use-case documentation.
• Design and build custom detection content aligned to the client’s threat profile and available telemetry.
• Integrate and operationalize Microsoft Defender XDR.
• Assess requirements and advise on best-practice implementation and configuration for Microsoft Purview, Entra ID, Defender for Cloud, Azure security, Copilot.
• Deliver guided implementation and hands-on configuration when required.
• Microsoft Purview: you can discover client requirements, recommend a target configuration, and explain