Defender For Office Engineer

job summary:

Remote location: Telecommute

job type: Contract

salary: $60 - 100 per hour

work hours: 9am to 5pm

education: Bachelors

• Design, implement, and maintain Microsoft Sentinel SIEM/SOAR solutions.
• Ingest and manage security data sources into Azure Log Analytics (Syslog, CEF, APIs, Threat Intelligence feeds).
• Develop and tune KQL queries, analytics rules, alerts, and dashboards.
• Build automated response playbooks using Azure Logic Apps and Microsoft Copilot for Security.
• Perform threat hunting, incident investigation, and response activities with SOC teams.
• Implement and manage Azure security controls aligned with Zero Trust principles.
• Assess vulnerabilities, analyze attacker TTPs, and support remediation efforts.
• Support cloud security governance, compliance, and audit activities, including FedRAMP and FISMA requirements.
• Provide security architecture guidance and contribute to cloud security strategy initiatives.

Required Qualifications Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related field. 5+ years of cybersecurity experience, including 5+ years of hands-on Microsoft Sentinel administration and engineering. Strong experience with: Microsoft Sentinel, Azure Log Analytics, Kusto Query Language (KQL), Azure Logic Apps, Microsoft Defender Suite, Azure Security and Identity Services, Privileged Access Management (PAM), CI/CD security and application security scanning, Experience configuring and securing enterprise Azure environments. Knowledge of Zero Trust architecture and cloud security best-practices.

Preferred Qualifications Azure Government (GovCloud) experience. Experience supporting FISMA, FedRAMP, and NIST compliance frameworks. Relevant certifications such as: CISSP, CCSP, Microsoft Azure Security Engineer Associate, Microsoft Cybersecurity Architect Expert, Experience collaborating with government clients, auditors, and executive stakeholders.

Additional Technical Expertise Microsoft Defender XDR: Defender for Endpoint, Office 365, Identity, and Cloud Apps; Data Protection: Microsoft Purview, MIP, DLP, Key Vault Identity & Access Management: Entra ID (Azure AD), PIM, Conditional Access, Azure Lighthouse, Zero Trust Cloud Security: Azure Security Services, M365 Security, Multi-Cloud IAM skills: APIs,Entra ID (Azure AD),Cloud,government cloud,cloud security,CI/CD,security architecture,Cybersecurity,security operations,Threat Intelligence,cyber threats,threat hunting,Defender for Endpoint,Identity & Access Management,IAM,Computer Science,Information Technology,Key Vault,KQL,Kusto Query Language (KQL),Log Analytics,Microsoft Defender,Azure Cloud,Azure,Azure Logic Apps,Azure environments,Microsoft Azure,Office 365,Microsoft Copilot,Microsoft Sentinel,Multi-Cloud,SIEM,application security,Syslog,configuring,Zero Trust principles,Zero Trust architecture,Zero Trust,Conditional Access,administration,audit,auditors,automation,Office 365,Microsoft Azure,Azure,Data Protection,CISSP,CCSP,government security,dashboards,Data Protection,FedRAMP,FISMA,governance,security technologies,incident investigation,Microsoft Cybersecurity Architect Expert,NIST,Privileged Access Management,investigate,Security,Security Services,security controls,security practices,security solutions,vulnerabilities

For applications and inquiries,