7 Microsoft Sentinel SIEM Engineer Jobs in Annapolis, MD

SORT BY

SET JOB ALERT

OFF

Details...

Microsoft Sentinel SIEM Engineer

Trioptus

Annapolis, MD | Full Time

$103k-128k (estimate)

Just Posted

Microsoft Sentinel SIEM Engineer

Edify Technologies

Annapolis, MD | Contractor

$80k-99k (estimate)

2 Days Ago

Microsoft Sentinel SIEM Engineer

Elegant Enterprise Wide Solutions, Inc

Annapolis, MD | Contractor

$96k-120k (estimate)

4 Days Ago

Microsoft Sentinel SIEM Engineer

Tri Force Consulting Services

Annapolis, MD | Full Time

$99k-124k (estimate)

6 Days Ago

Microsoft Sentinel SIEM Engineer in Annapolis, MD

Elegant Enterprise Wide Solutions, Inc

Annapolis, MD | Full Time

$111k-133k (estimate)

6 Days Ago

Remote Microsoft Sentinel SIEM Engineer - Remote

Mfinite Consulting LLC

Annapolis, MD | Full Time

$121k-149k (estimate)

6 Days Ago

Sentinel SIEM Engineer: MD: Remote

NextRow Inc.

Annapolis, MD | Full Time

$102k-124k (estimate)

5 Days Ago

Microsoft Sentinel SIEM Engineer

$99k-124k (estimate)

Full Time 6 Days Ago

Save

Tri Force Consulting Services is Hiring a Microsoft Sentinel SIEM Engineer Near Annapolis, MD

Title: Microsoft Sentinel SIEM Engineer

Duration: 12 months

Client: Maryland Judiciary, Administrative Office of the Courts

Location: Annapolis, MD 21401

Note: This is a 100% Remote position.

“The applicant is the center of our universe.”

Job Description:

The SIEM Engineer is responsible for designing, implementing, and managing the Microsoft Sentinel SIEM solution to collect, analyze, and visualize data from various sources within the Judiciary.
This role involves managing the SIEM environment, creating dashboards, and ensuring the effective use of SIEM's capabilities to monitor, detect, and respond to security threats and operational insights for the consumption of the Security Analysts.
The Microsoft Sentinel SIEM Engineer will work closely with security analysts, and stakeholders to optimize data intelligence and drive informed incident detection and response.

SIEM Configuration:

Design and deploy SIEM resources, including configuring analytics rules, playbooks, Azure logic apps and data connectors, to support data collection and analysis needs.
Optimize SIEM configurations to ensure efficient data storage, retrieval, and search capabilities.
Data Collection and Integration:
Collaborate with system owners to identify available data sources and drive initiatives to ingest that system data.
Develop data ingestion strategies, create data inputs, and set up data source integration for various log and event data types.
Design and implement data normalization and transformation processes for consistent and accurate analysis.
Dashboard and Visualization Development:
Design and create interactive dashboards, reports, and visualizations using SIEM's capabilities.
Present data insights in a clear and actionable manner to support decision-making processes.
Develop data visuals for the SOC displays screens.

Search, Queries and Alerts:

Develop and optimize analytics rules and alert mechanisms to monitor for security threats proactively, anomalies, and operational issues.
Configure alerts to trigger automated responses or notifications based on predefined criteria.

SIEM App Development:

Build custom SIEM apps and add-ons to extend functionality and support specific agency requirements.
Collaborate with development teams to integrate SIEM with other systems and tools.

Security and Compliance:

Implement security controls and best practices to protect data stored in SIEM and ensure compliance with relevant regulations and standards.
Monitor and analyze security-related events to detect and respond to potential threats.

Performance Optimization:

Monitor system performance and troubleshoot issues related to data indexing, search performance, and resource utilization.
Implement optimizations to enhance SIEM's efficiency and responsiveness.

Training and Documentation:

Provide training and guidance to other JIS SOC team members on Microsoft Sentinel best practices, usage, and administration.
Create documentation for configurations, processes, and troubleshooting procedures.

OFFEROR RESOURCE(S) SKILLS, EXPERIENCE, & CAPABILITIES

Recent experience with the administration and management of Microsoft Sentinel. b. Experience developing, compiling, and executing KQL queries.
Strong aptitude to learn platforms, to work with stakeholders, to understand and provide thoughts on how to customize and maintain platforms to meet organizational business needs.

PLACE OF PERFORMANCE

Work shall be performed 100% remote at a suitable off-site location selected by the Offer/Offer or Resource(s).
The AOC reserves the right to determine an off-site location is not suitable
On-site support may be required.
As designated by the Judiciary’s Chief Technology Officer, the proposed resource(s) must be able to report on-site within seventy-two (72) hours after notification.
If required to report, the Offer or Resource shall report to Maryland Judiciary Information Systems, 189 Harry S Truman Parkway, Annapolis, MD 21401.
The AOC does not have a limit on the number of times the proposed resource(s) may be required to be onsite.

Required Skills:

The Offer or shall have one (1) year of experience in providing recruitment, staffing, and/or otherwise providing professional consulting services.
The Offer or shall propose resource(s) that meet the following minimum qualifications:
BA/BS degree in Computer Science, Business Management, or an IT related field (as determined by the AOC).
The AOC prefers Offer or proposed resource(s) to have the following qualifications:
Three (3) years’ experience with Azure Sentinel.
Three (3) years’ experience with Kusto Query Language.
One (1) year experience with Information Security.
Active Microsoft Security Operations Analyst Associate certification.

" If you are: bright, motivated, skilled, a difference-maker, able to get things done, work with minimum direction, enthusiastic, a thinker, able to juggle and multi-task, communicate effectively, and lead, then we would like to hear from you. We need exceptionally capable people for this role for our client, so get back to us and tell us why you think you are a fit. "

About Us:

Tri-Force is one of the fastest growing companies in the Philadelphia region receiving the award 5 times and 3 times(Ranked #931 2021) on Inc. 5000 fastest growing companies in the USA. Tri-Force Consulting Services, Inc. is an established consulting services firm offering innovative solutions to Government and Commercial sectors. We specialize in building customized software application solutions such as knowledge management systems, business intelligence, data analysis, database support and maintenance, data warehouse implementation and support, systems architecture, and systems integration for our clients. Our technical competencies are in Java,.NET, SharePoint, PHP, Business Intelligence (Cognos, Data Warehouse), mobile applications platforms (iPhone, iPad, Android, Blackberry), and various other technologies. We also specialize in providing resources to manage infrastructure projects. Tri-Force is one of the fastest growing companies in the Philadelphia region, receiving the award 5 times and 2 times on Inc. 5000 fastest growing companies in the USA.