Source Job

US

  • Lead enterprise-scale security deployments using Microsoft Sentinel and Defender XDR.
  • Design advanced detection, automation, and reporting to improve threat visibility.
  • Mentor engineers and deliver technical leadership across complex customer projects.

Microsoft Sentinel Azure KQL Security Architecture

20 jobs similar to Senior Security Engineer

Jobs ranked by similarity.

US

  • Lead remote implementation and optimization of Microsoft Sentinel and Defender solutions.
  • Develop detection rules, automation, and reporting to improve threat visibility.
  • Collaborate with customers and internal teams to deliver scalable security outcomes.

Our partner is a cybersecurity engineering organization that helps companies protect against increasingly sophisticated digital threats. They foster a collaborative and innovative culture, with a team of cybersecurity specialists and technical professionals focused on delivering measurable security impact.

$110,000–$145,000/yr
US

  • Design, deploy, and maintain Microsoft cloud security technologies including Purview, Defender for Cloud, and Entra ID.
  • Apply a red-team mindset to identify weaknesses and improve security posture.
  • Act as a trusted security advisor to internal teams and customers on governance and data protection.

Patch My PC provides an enterprise solution for automating and managing third-party updates in Microsoft ConfigMgr, Intune, and WSUS. The fully remote crew of 150 GIF-loving humans supports over 10,000 customers and more than 32 million devices.

US Unlimited PTO

  • Deliver hands-on Microsoft security engagements focusing on Entra ID (identity and access) and Purview (data protection), with supporting work in Intune and Defender XDR.
  • Own technical delivery independently (80% billable target), manage time and communication within engagements, and contribute to internal practice and knowledge-sharing.
  • Partner with architects and principal consultants across varied industries and environments to design and implement identity, data security, and endpoint solutions.

GuidePoint Security provides trusted cybersecurity expertise, solutions, and services that help organizations make better decisions and minimize risk. With over 1,300 employees and a culture driven by core values, collaboration, and mentorship, it serves as a trusted advisor to Fortune 500 companies and government agencies.

Europe

  • Monitor, triage, and investigate security alerts across SIEM, EDR, and cloud environments.
  • Analyze logs from Windows, Linux, databases, and network systems to identify and remediate threats.
  • Work with Incident Response teams to contain threats and improve detection quality.

Talan is a global consulting group specializing in innovation and business transformation through technology. With over 7,200 consultants across 21 countries and an €850M turnover, we deliver future-ready solutions in a multicultural, growth-oriented environment.

$6,024–$10,843/yr
India Philippines

  • Monitor, triage, and resolve security alerts in Microsoft Defender XDR and Sentinel.
  • Lead incident response end-to-end and maintain ISO 27001 documentation and audits.
  • Administer IAM, PAM, and patch management to enforce least privilege and compliance.

Appen is a leader in AI training data, specializing in human-generated data to train, fine-tune, and evaluate models across generative AI, LLMs, computer vision, and speech. With over 1 million contributors in more than 200 countries, the company fosters a culture of innovation, collaboration, and humility.

Global

  • Contribute to the development, tuning, and maintenance of security monitoring and detection capabilities across SIEM, EDR, and cloud platforms.
  • Support the onboarding, integration, and testing of security data sources and telemetry feeds.
  • Collaborate with threat intelligence and incident response teams to translate requirements into effective detection mechanisms.

Talan is an international consulting group specializing in innovation and business transformation through technology. With over 7,200 consultants in 21 countries and a turnover of €850M, they are committed to delivering impactful, future-ready solutions.

EMEA

  • Monitor, triage, and investigate security alerts across SIEM, EDR, Microsoft security tools, and cloud platforms.
  • Analyze host and network logs from Windows, Linux, databases, applications, web servers, firewalls, and NIDS/HIDS.
  • Support incident response, remediation, and recovery activities while collaborating with global cybersecurity teams.

Pragmatike is a recruitment firm that recruits on behalf of major international organizations in the cybersecurity and cloud security space. They are committed to a fair, transparent, and inclusive recruitment process, fostering a culture of diversity and global collaboration.

$90,000–$100,000/yr
US

  • Monitor, triage, and respond to security alerts and incidents across the security stack.
  • Engineer, implement, and maintain information security technologies such as SIEM, detection rules, and automation.
  • Collaborate with teams to promote information security culture and advise on cyber risk across the organization.

VEIC is a sustainable energy organization working toward a healthy planet, thriving people, and energy justice. The company values an inclusive culture and supports flexible work arrangements, welcoming candidates of all backgrounds.

$135,900–$153,000/yr
US

  • Design and implement IAM models, RBAC, and privileged access controls for a secure Azure tenant.
  • Configure Defender for Cloud, Azure Policy, logging, monitoring, and key vault solutions.
  • Support compliance efforts and secure IaC/CI/CD practices while collaborating with engineers and stakeholders.

Nava is a consultancy and public benefit corporation modernizing government services through human-centered design and secure cloud infrastructure. Since 2015, it has partnered with federal, state, and local agencies, fostering a collaborative, remote-first culture focused on public good.

India

  • Monitor, triage, and investigate security alerts across SIEM, EDR, and cloud platforms.
  • Conduct deep log analysis and escalate threats to specialized incident response teams.
  • Improve detection quality, reduce false positives, and maintain SOC documentation.

They operate a global 24/7 Security Operations Centre focused on detecting, investigating, and responding to cyber threats. They provide a remote-first, globally distributed working environment with an inclusive and transparent culture.

$157,675–$238,500/yr
US

  • Build, deploy, and continuously improve MITRE ATT&CK–aligned detections across cloud, endpoint, identity, email, and application telemetry with clear false-positive thresholds.
  • Own the full detection lifecycle from hypothesis and data validation through deployment, tuning, and retirement.
  • Advance the detection-as-code platform with version control, peer review, automated testing, CI/CD, and improved pipeline reliability and observability.

Samsara is the pioneer of the Connected Operations™ Cloud, helping organizations that depend on physical operations to harness IoT data for actionable insights. They are a recently public company with a high-caliber team, embracing a flexible working model that supports remote and hybrid work.

Global

  • Execute end-to-end platform deployments across Google SecOps and Microsoft Sentinel for new customers.
  • Onboard log sources, configure data connectors, and validate ingestion pipelines.
  • Train customers on their deployed platform and document handoff notes for ongoing support.

TENEX is an AI-native, automation-first Managed Detection and Response (MDR) provider that combines cutting-edge AI with human expertise to deliver security operations. It is a fast-growing startup backed by top-tier investors, with a mission-driven and customer-obsessed culture.

$70,000–$80,000/yr
US 3w PTO

  • Lead analysis, containment, and remediation of complex security threats across a multi-tenant client base.
  • Serve as the primary escalation point for Tier I analysts and own critical incidents.
  • Mentor junior staff and drive improvements to playbooks, workflows, and DFIR capabilities.

Sentinel Blue is a young company bringing enterprise-class cybersecurity to small and medium-sized businesses. The environment is fast-paced and dynamic, with a focus on continuous learning and innovation.

$105,000–$105,000/yr
US

  • Act as the primary escalation point and technical lead for complex incidents.
  • Enhance monitoring by tuning alerts, refining detection logic, and automating workflows.
  • Mentor junior engineers and document incident response procedures.

DYOPATH is a managed security services provider that helps organizations defend against evolving cyber threats through security operations and monitoring. The company fosters an award-winning culture guided by its L.O.V.E. philosophy, emphasizing teamwork, respect, and professional growth.

Canada

  • Provide technical and operational leadership for a Security Operations Center, monitoring threats and driving incident response.
  • Design and develop security tools and platforms to improve detection, response, and operational efficiency.
  • Mentor early-career engineers and contribute to open source security projects and industry conferences.

Jobgether uses AI-powered matching to help candidates find jobs. The company operates a fully distributed, remote-first environment with in-person team events.

US

  • Run and tune the client's Microsoft Purview setup including labels, DLP, retention, insider risk, and eDiscovery from day one.
  • Partner with Security, Legal, Compliance, Privacy, IT, and Data Governance teams to mature and scale enterprise data protection.
  • Operate at both technical and strategic levels to drive data security posture and reporting to leadership.

New Era Technology securely connects people, places, and information with end-to-end technology solutions at scale. With a global team of over 3,000 professionals, they foster a People First culture focused on collaboration, inclusion, and continuous development.

$170,000–$190,000/yr
US Unlimited PTO

  • Work across strategic customer accounts to make Dropzone more trusted and embedded in daily security operations.
  • Partner with TAMs, Product, and Engineering to review investigations, tune configurations, and refine response workflows.
  • Translate customer SOC practices into Dropzone behavior, measure impact, and build repeatable playbooks.

Dropzone AI is a venture-backed cybersecurity company using Gen AI to offload repetitive work for security analysts and transform cyber defense. The team has deep experience across cybersecurity, AI/ML, and SaaS product development, with an early-stage, high-ownership remote culture.

US

  • Design and write detections for data misuse and exfiltration at scale, closing visibility gaps across infrastructure.
  • Build automation and detection models that surface anomalous activity and speed up response to insider threats.
  • Partner with engineering, HR, and Legal on complex investigations and participate in incident response and on-call rotation.

US

  • Improve cloud security posture through practical, scalable policy engineering.
  • Deliver reusable Terraform modules and secure-by-default infrastructure patterns.
  • Support FedRAMP and regulated cloud environments with effective technical controls and continuous monitoring.

UltraViolet Cyber is a platform-enabled unified security operations company providing managed and custom-tailored security operations solutions to Fortune 500, Federal Government, and Commercial clients. Founded and operated by security practitioners with decades of experience, the company combines technology innovation and human expertise to make advanced real-time cybersecurity accessible for all organizations.

Colombia

  • Safeguard customer digital assets, sensitive data, and critical systems against cyber threats as part of the MXDR team.
  • Leverage expertise in vulnerability identification, robust security implementation, and incident response to enhance security posture.
  • Collaborate with cross-functional teams to assess risks, formulate security strategies, and ensure adherence to industry standards.

Check Point Software Technologies is a leading vendor of cybersecurity solutions, protecting against sophisticated threats and attacks. The company has been honored by Time Magazine as one of the World’s Best Companies for 2024 and recognized as one of the World’s Top Female-Friendly Places to Work.