Cyber Security Engineer - Microsoft Sentinel; SIEM​/SOAR​/UEBA

Overview

Cyber Security Engineer II – Microsoft Sentinel (SIEM / SOAR / UEBA).

Location:

Austin, TX - Onsite.

• Design, develop, test, and deploy Microsoft Sentinel analytics rules, automation playbooks, and workbooks.
• Build SOAR automation workflows using Azure Logic Apps, Azure Functions, and REST APIs.
• Develop UEBA models, anomaly detection rules, and behavior-based analytics using KQL.
• Integrate Sentinel with EDR, IAM, firewalls, ticketing systems
  , and other security platforms.
• Design and maintain log ingestion pipelines, custom connectors, and data normalization logic.
• Tune SIEM detections to reduce false positives and align with MITRE ATT&CK and Zero Trust principles.
• Support incident response, threat hunting, and advanced security investigations.
• Use Dev Ops pipelines (Azure Dev Ops, Git Hub) for version control and deployment.
• Create and maintain technical documentation, runbooks, and design artifacts.
• Collaborate with cybersecurity, infrastructure, and application teams to meet security and compliance requirements.
• Graduation from an accredited four-year college or university with major coursework in Computer Science, Computer Information Systems, Software Engineering, Cybersecurity, or a related field
  .
• Two (2) years of full-time experience in software development, cloud engineering, SIEM engineering, or cybersecurity engineering
  .

• Three (3) or more years of hands-on technical experience with Microsoft Sentinel
  .
• Experience developing UEBA models, anomaly detection rules, and behavior-based analytics
  .
• Experience building Security Automation (SOAR) playbooks
  .
• Microsoft certifications such as:
• SC-200 – Security Operations Analyst
• AZ-900 or AZ-104
• SC-100 or SC-300
• Experience integrating Sentinel with EDR, IAM, firewalls, and ticketing systems
  .
• Experience with Dev Ops pipelines (Git Hub, Azure Dev Ops).
• Experience working in a government, healthcare, or regulatory environment
  .

• Seniority level: Mid-Senior level
• Employment type: Contract
• Job function: Information Technology
• Industries: IT Services and IT Consulting