Cybersecurity Engineering Specialist

Job Description

We are seeking for Engineering Senior Specialist to design, engineer, and operate enterprise-scale XDR and SIEM platforms across Microsoft and Google security ecosystems. This role operates at the intersection of security platform engineering, detection engineering, and operational resilience, with a clear mandate to improve threat detection quality, response effectiveness, data fidelity, and platform reliability in a global enterprise environment.

The ideal candidate brings deep hands-on engineering expertise, an operations-first mindset, and the ability to collaborate effectively with SOC (CFC), cloud, identity, and infrastructure teams.

Platform Engineering & Operations

• →

  Engineer, operate, and continuously optimize Microsoft Sentinel and Microsoft Defender XDR (Defender for Endpoint, Identity, Office, and Cloud).

• →

  Engineer and operate Google Security Operations (Chronicle SIEM) to support high-volume security telemetry ingestion, analytics, and long-term retention.

• →

  Design and maintain scalable ingestion architectures, including normalization, enrichment, routing, and retention across hybrid and multi-cloud environments.

• →

  Ensure platform reliability, performance, cost awareness, and operational stability.

Detection Engineering & Threat Response Enablement

• →

  Support detection tuning activities to reduce false positives, improve signal-to-noise ratio, and align with SOC workflows.

• →

  Provide deep platform and data expertise to support incident investigation, threat hunting, and response activities.

• →

  Align detection logic with MITRE ATT&CK and threat-informed defense principles.

Data Quality, Telemetry & Observability

• →

  Support onboarding, validation, parsing, and ongoing quality monitoring of security telemetry sources.

• →

  Partner with application, platform, and infrastructure teams to identify and close logging and visibility gaps.

• →

  Establish and enforce data quality standards to ensure reliable detection, investigation, and reporting.

• →

  Ensure logging and monitoring practices meet internal security standards and regulatory requirements.

Automation & Continuous Improvement

• →

  Implement automation for detection lifecycle management, enrichment, and response orchestration using SOAR and native platform capabilities.

• →

  Drive standardization, documentation, and runbook development to improve operational maturity and resiliency.

• →

  Contribute to platform roadmaps, reliability improvements, and technical debt reduction initiatives.

Collaboration & Governance

• →

  Work closely with CFC/SOC, Cloud Security, Identity, Infrastructure, and Compliance teams.

• →

  Support audit and compliance activities, including SOX and regulatory log‑retention requirements.

• →

  Provide technical input into onboarding decisions, platform changes, and security architecture reviews.

• 5+ years of experience in security engineering, detection engineering, or SOC engineering roles.

• Strong hands-on experience with Microsoft Sentinel and Microsoft Defender XDR.

• Experience with Google Security Operations (Chronicle SIEM) or equivalent large-scale cloud SIEM platforms.

• Proficiency in KQL and experience authoring structured detection logic.

• Solid understanding of cloud security (Azure and/or GCP), identity, endpoint, and network telemetry.

• Experience operating security platforms in large, complex enterprise environments.

Current Employees apply HERE

Current Contingent Workers apply HERE