Senior Detection Engineer

Job Summary

Owning the detection coverage across Microsoft security products, the full-time remote Senior Detection Engineer will manage detection capabilities, build and maintain a comprehensive map of Microsoft security signals, and automate investigative workflows to enhance SOC operations.

Key responsibilities

• Build and maintain a living map of Microsoft security signals, tracking changes and ensuring detection efficacy
• Automate Microsoft-specific investigative workflows to improve SOC analyst efficiency
• Collaborate with engineering teams on Microsoft integrations, API limits, and schema mapping

Required qualifications

• Deep, current knowledge of the Microsoft security stack, including Defender XDR, Entra ID, and Sentinel
• Fluency in KQL for writing and optimizing hunting queries across Defender and Sentinel
• Experience with Graph and Graph Security APIs, including authentication and permission models
• 5+ years in information technology or security operations, particularly in Microsoft environments
• Proficiency in Python and experience with custom detections against Microsoft datasets