Security Engineer II

Job Title: Security Engineer II
Team: Deployment Engineering, Microsoft
Location: Remote, US
Work Authorization: US Citizenship Required

Blue Voyantis excited to invite applications for the role of Security Engineer II. In this dynamic position, you will use your expertise in Microsoft Cloud security technologies and SIEM platforms to enable our MDR solutions in customer environments. In this role, you will take the lead in client facing SIEM and XDR technical enablement projects, which include hands‑on deployment of a wide breadth of Microsoft Security and Azure solutions.

• Work on Microsoft Sentinel and/or Defender project implementations for customers (remotely), starting with design and architecture, deployment, and use case tune‑up.
• Create and develop new detection, automation, and reporting use cases per customer requirements.
• Define and assist in the creation of operational and executive security reports and dashboards.
• Participate in research and development activities with the goal of process improvement and new product/feature enhancements.
• Participate in ongoing support activities for client facing environments to help mature and maintain our MDR practices.
• Work on XDR integration activities across the Microsoft and Azure product stacks.
• Familiarity with Microsoft XDR and Zero Trust Architecture models.
• Be the lead technical delivery resource within a team for small to large client‑facing projects.

• At least five years of technical experience with Microsoft Cloud Security technologies or other equivalent SIEM and XDR solutions.
• Strong experience with Azure Cloud technologies.
• Experience in query languages and/or script development (KQL, SPL, SQL, Power Shell, etc.).
• Knowledge and familiarity of enterprise IT systems in relation to cyber security.
• Hands‑on engineering experience with SIEM and/or XDR technologies.
• Excellent communication skills to work in a dynamic and fast‑paced team environment.

• Hands‑on Engineering experience with Microsoft Sentinel.
• Hands‑on engineering experience of Microsoft Defender security.
• Experienced in customer‑facing roles.
• Expertise in Kusto Query Language.
• Expertise in Azure Logic Apps, Function apps, and other Azure technologies.
• Incident investigation and response skill set.
• Proficient in Python, Power Shell or C#/.NET.
• Proficient in Linux configuration and common administration tasks.

At Blue Voyant, we recognize that effective cyber security requires active prevention and defense across both your organization and supply chain. Our proprietary data, analytics, and technology, coupled with deep expertise, works as a force multiplier to secure your full ecosystem. Accuracy! Actionability! Timeliness! Scalability!

Led by CEO, Jim Rosenthal, Blue Voyant’s highly skilled team includes former government cyber officials with extensive frontline experience in responding to advanced cyber threats on behalf of the National Security Agency, Federal Bureau of Investigation, Unit 8200, and GCHQ, together with private sector experts. Blue Voyant services utilize large real‑time datasets with industry leading analytics and technologies.

Founded in 2017 by Fortune 500 executives, including Executive Chairman, Tom Glocer, and former Government cyber officials, Blue Voyant is headquartered in New York City and has offices in Maryland, Tel Aviv, San Francisco, London, Budapest, and Latin America.

Blue Voyant uses AI‑assisted tools within our applicant tracking system to help identify candidates whose experience and skills best match the requirements of a role. This technology provides hiring teams with additional insights to support fair and efficient hiring decisions. Please note that all applications are reviewed by a member of our hiring team, and final hiring decisions are made by humans, not AI.

By submitting your application, you acknowledge that AI tools may assist in the evaluation of your resume as part of the recruitment process. For more information on how we process your personal data, please review our Candidate Privacy Notice available at

All employees must be authorized to work…