Cyderes20d ago

Senior Security Engineer, Managed Microsoft Sentinel

Bengaluru, KarnatakaFull-Timemid

EngineeringSecurityOtherSecurity Engineer

1 views0 saves0 applied

Apply Now

Quick Summary

Overview

We help the world Be Everyday Ready™ Today’s threatscape is relentless. So are we. At Cyderes, we specialize in building practical IAM, exposure management, and risk programs, and stopping active threats fast with MDR that works with your existing security tools — all augmented by AI and driven…

Technical Tools

azurepythoncybersecuritylinuxnetworkingrest-apis

We help the world Be Everyday Ready™

Today’s threatscape is relentless. So are we. At Cyderes, we specialize in building practical IAM, exposure management, and risk programs, and stopping active threats fast with MDR that works with your existing security tools — all augmented by AI and driven by seasoned operators. Our tireless global team is laser-focused on cybersecurity, arming organizations with the people, platforms, and perspectives they need to conquer whatever tomorrow throws their way.

About the Role

~1 min read

Be a subject matter expert (SME) for Microsoft Sentinel and Microsoft Defender XDR across managed clients

Lead the intake process and platform readiness during Eastern Standard Time business hours

Lead administration and lifecycle management of:

Microsoft Sentinel

Microsoft Defender XDR suite

Oversee and improve platform health monitoring, including:

Log ingestion pipelines and data normalisation

Data connector stability and performance

Automation strategies and SOAR workflows

Analytics rule efficiency and alert reliability

Analyse ingestion trends and lead cost optimization strategies across multi-tenant environments

Guide tenant standardisation, configuration baselines, and best practices across MSSP deployments

Be an escalation point for complex platform or telemetry issues

Onboard new data sources into Microsoft Sentinel following established SOPs:

Validate connectivity

Confirm correct parsing and schema normalisation

Ensure events are visible and queryable in Log Analytics

Integrate Microsoft Defender data sources:

Defender for Endpoint

Defender for Identity

Defender for Cloud Apps

Validate data integrity and entity mapping

Troubleshoot ingestion or connector issues across Azure and third-party integrations

Lead onboarding of new and complex data sources into Microsoft Sentinel

Design and evolve standard operating procedures (SOPs) for data onboarding

Ensure: Reliable connectivity

Accurate parsing and schema normalisation

Entity mapping and enrichment

End-to-end data visibility in Log Analytics

Manage integration strategy for Microsoft Defender data sources:

Defender for Endpoint

Defender for Identity

Defender for Cloud Apps

Troubleshoot and resolve advanced ingestion, schema, or connector issues across Azure and third-party platforms

Advise on architectural decisions related to telemetry quality and coverage

Design advanced analytics rules, including:

Scheduled

Near-Real-Time (NRT)

Fusion and correlation-based detections

Lead development and optimization of complex KQL-based detection logic

Oversee false-positive reduction projects through structured tuning, suppression, and enrichment

Ensure MITRE ATT&CK mapping and detection coverage analysis

Improve cross-platform correlation between Microsoft Defender XDR and Sentinel• Design:

Workbooks and dashboards for operational and executive visibility

Reusable detection and threat hunting libraries

Review and provide feedback on detection logic authored by junior engineers

Architect, maintain advanced Azure Logic App strategies

Design end-to-end automation for:

Device isolation

Account disablement or remediation

IP and domain blocking

Case and ticket orchestration

Integrate REST APIs and external systems where required

Enforce change management and version control standards

Validate automation through testing in non-production environments

Identify opportunities to reduce analyst workload through automation

Be a technical mentor to Security Engineer I/II team members

Lead or contribute to:

Runbooks

SOPs

Detection documentation

Platform onboarding standards

Document complex investigations, detection logic, and platform decisions

Provide strategic tuning and architecture feedback to senior engineering and security leadership

Stay current with Microsoft security roadmap changes and new threat trends

Participate in internal training sessions and contribute to knowledge-sharing projects

Education experience

Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or related field (or equivalent

5–8 years of experience in security engineering, SOC, or security operations roles

3+ years hands-on experience with Microsoft Sentinel

Deep experience with the Microsoft Defender XDR suite

Experience operating in MSSP or customer-facing environments

Hands-on exposure to multi-tenant security operations (Azure Lighthouse)

Demonstrated experience leading security engineering projects

Working knowledge of:

o Microsoft Sentinel

o Microsoft Defender XDR

o Azure Log Analytics• Advanced Proficiency in KQL

Experience with:

o Windows & Linux logs

o Azure AD / Entra ID

o Networking fundamentals (TCP/IP, ports, firewalls, or proxies)

o Authentication and authorization models

Hands-on experience with:

o Azure Logic Apps

o REST APIs

o PowerShell or Python scripting

Experience with the MITRE ATT&CK framework

Familiarity with MDR and SOC operational workflows

Translate security telemetry into applicable detections

SC-200 (Microsoft Security Operations Analyst)

AZ-500 (Azure Security Engineer)

SC-100 (Cybersecurity Architect)

CompTIA Security+

Relevant Microsoft Defender certifications

Document investigations and platform changes thoroughly

Customer-focused mindset and risk-driven approach

Comfortable balancing hands-on engineering with strategic ownership

Location & Eligibility

Where is the job

—

Location terms not specified

Who can apply

Same as job location

Listed under

Worldwide

Listing Details

Posted: April 15, 2026
First seen: April 15, 2026
Last seen: May 5, 2026

Posting Health

Days active: 20
Repost count: 0
Trust Level: 38%
Scored at: May 6, 2026

Signal breakdown

freshnesssource trustcontent trustemployer trust

Apply for this position

Cyderes

lever

Cyderes is a leading global provider specializing in full life-cycle cybersecurity services, helping organizations manage risk and respond to threats effectively.

Employees

350

Founded

2017

Domain

Jobs

External application · ~5 min on Cyderes's site

Please let Cyderes know you found this job on Jobera.