SentinelSIEM Engineer

Location: Annapolis, MD (Remote)

Duration: Long Term Contract

Qualification

BA/BS degree in Computer Science, Business Management, or an IT related field.

Qualifications

• Three (3) years' experience with Azure Sentinel.
• Three (3) years' experience with Kusto Query Language.
• One (1) year experience with Information Security.
• Active Microsoft Security Operations Analyst Associate certification.

Mid to expert level preferred skills, Experience, and Capabilities:

• Recent experience with the administration and management of Microsoft Sentinel.
• Experience developing, compiling, and executing KQL queries.
• Strong aptitude to learn platforms, to work with stakeholders, to understand and provide thoughts on how to customize and maintain platforms to meet organizational business needs.
• Experience generating playbooks and using Azure logic apps for security orchestration, automation and response.
• Experience in querying, reviewing and providing contextual information from log data.
• Proficient in the use of M365 Office suite of tool.
• Ability to establish and maintain effective working relationships with peers, end users and vendor development staff, as well as all levels of management and judicial personnel as necessary.
• Ability to communicate clearly and lead technical discussions related to log data management and knowledge sharing.