Security Engineer II

Position: Security Engineer II
Reports To: Senior Manager, Security Engineering
Department: Deployment Engineering, Microsoft
Location: Remote, US
Work Authorization: US Citizenship Required

Blue Voyant is seeking a Security Engineer II to join our Deployment Engineering team, focused on enabling our Managed Detection and Response (MDR) solutions in customer environments. This fully remote role uses your expertise in Microsoft Cloud security technologies and SIEM platforms to lead client-facing SIEM and XDR technical enablement projects, including hands‑on deployment of a broad range of Microsoft Security and Azure solutions.

• Deliver Microsoft Sentinel and Defender implementations for customers remotely, from design and architecture through deployment and use case tuning.
• Create and develop new detection, automation, and reporting use cases based on customer requirements.
• Define and assist in building operational and executive security reports and dashboards.
• Lead XDR integration activities across the Microsoft and Azure product stacks, applying Microsoft XDR and Zero Trust Architecture principles.
• Serve as the lead technical delivery resource within a team for small to large client‑facing projects.
• Participate in research and development activities to drive process improvement and new product and feature enhancements.
• Support client‑facing environments on an ongoing basis to help mature and maintain our MDR practices.

• 5+ years of technical experience with Microsoft Cloud Security technologies or equivalent SIEM and XDR solutions.
• Hands‑on experience deploying and/or managing Microsoft Sentinel.
• Hands‑on experience deploying and/or managing Microsoft Defender security products (e.g., Defender for Endpoint, Identity, Cloud Apps, Office 365, Defender for Cloud).
• Hands‑on engineering experience with SIEM and/or XDR technologies in production environments.
• Strong experience with Azure Cloud technologies.
• Experience with query languages and/or script development (KQL, SPL, SQL, Power Shell, or similar).
• Knowledge of enterprise IT systems as they relate to cybersecurity.
• Familiarity with Microsoft XDR and Zero Trust Architecture models.
• Excellent communication skills and the ability to thrive in a dynamic, fast‑paced team environment.

• Expertise in Kusto Query Language (KQL), including Sentinel Analytic Rules and Defender Custom Detection Rules.
• Expertise in Azure Logic Apps, Function Apps, and other Azure technologies.
• Experience in customer‑facing roles.
• Incident investigation and response skills.
• Proficiency in Python, Power Shell, or C#/.NET.
• Proficiency in Linux configuration and common administration tasks.
• Experience with non‑Microsoft SIEM or EDR tools.

• Bachelor's degree in a related field or equivalent professional experience and certifications.
• Relevant Microsoft certifications (e.g., SC-200, AZ-500) are a plus.

• Lead hands‑on Microsoft Sentinel, Defender, and Azure deployments that directly shape how customers detect and respond to threats.
• Work at the intersection of cloud security engineering, detection content, and customer delivery, building scalable solutions across diverse enterprise environments.
• Join a global, mission‑driven cybersecurity company defending organizations worldwide with cutting‑edge data, technology, and expertise.
• Competitive compensation and a comprehensive benefits package, with support for wellbeing, development, and career growth.

Blue Voyant is an AI-driven cybersecurity company dedicated to standing between our customers and cyber threats. By combining human, artificial, and proprietary intelligence, we deliver a unified solution that protects every organization's network, identities, vendors, and…