Microsoft Security Engineer-Client Consulting

Job Type: FTE

Level: Mid-Level

Department:
Security

Location:

Remote (US or Canada)

Rate: $80,000-$130,000 USD (rates vary in Canada)

As a Threat Protection Security Engineer at Cyclotron, you'll make an impact on diverse enterprise organizations by guiding and assisting enterprise deployments of Microsoft Defender XDR and Microsoft Sentinel, including Microsoft Defender for Office 365, Microsoft Defender for Endpoint, Microsoft Defender for Identity, Microsoft Defender for Cloud Apps, Microsoft Defender for Cloud, Entra Identity Protection, Microsoft Sentinel, and related Azure security features.

You will be the implementation engineer that works with Cyclotron clients to deploy industry-leading solutions to improve the protection of Microsoft-based assets within their on-premises and cloud environments. You will work with other security engineers and architects on multiple client engagements, collaborating, sharing information, skills and experience. You will understand how to use a wide variety of approaches to improve cloud, network and endpoint security posture within client security architectures.

The ideal candidate for this job will be a goal-oriented, client-focused Threat Protection and SIEM/SOAR engineer who possesses the ability to generate & execute technical designs based on client requirements to assist the customer to make the most of their investments in Microsoft technologies and services.

• Work directly with client teams to drive discovery, design, configuration, validation, piloting, deployment and support of Microsoft cloud and on-premises security capabilities
• Work across Cyclotron business units to provide a holistic approach that combines your areas of expertise in threat protection with identity & devices, compliance, and more
• Contribute to the development of new Threat Protection and SIEM services offered by Cyclotron
• Engage with other Cyclotron and customer teams to get and share information to improve processes and security posture

• Demonstrated knowledge and skill with Microsoft cloud security solutions and services such as Microsoft Defender for Office 365, Microsoft Defender for Endpoint, Microsoft Defender for Identity, Microsoft Defender for Cloud Apps, Microsoft Defender for Cloud, and Sentinel.
• Strong and demonstrated experience with KQL queries, Attack Simulation services, on-premises Microsoft security solutions including Windows 10 and 11, Windows Server and Active Directory as well as third party solutions used to protect hosts
• Strong communication skills, experience in leading technical discussions, providing guidance and direction when resolving technical challenges along with demonstrated technical writing experience.
• History with competitive security tools (Crowdstrike, Cortex, Webroot, Soti, Xen Mobile, Workspace ONE, Okta, Ping Federate, etc.)
• Experience with Microsoft Intune, Configuration Manager, Entra , Entra , SSO and Microsoft Purview capabilities
• Experience with data connectors, data sources, and Logic Apps
• Experience with migration of third party email security applications (Proofpoint, Mimecast, Cisco Secure Email, Tessian and Ironscales).
• Currently holds a Microsoft 365 Certified Security Administrator Associate or Azure Security Engineer Associated certification
• Currently holds a Certified Information Systems Security Professional (CISSP) and/or Certified Information Security Manager (CISM)
• Security Operations (Sec Ops) experience with Microsoft Defender XDR

• A sanitized example deliverable will be required, representing quality of your written work This can be a public blog, deliverable or documentation you have created (non-client-identifiable, and adhering to…