Join our team as a Security Consultant specializing in SecOps to help clients elevate their security operations. This role focuses on modernizing security infrastructure through the implementation and optimization of Microsoft Sentinel, Microsoft Defender XDR, and Security Copilot. You will leverage hands-on expertise, consulting acumen, and automation to enhance detection, investigation, response, and threat hunting capabilities across diverse hybrid and multi-cloud environments.

This position offers a dynamic blend of technical delivery and strategic customer engagement, aiming to build resilient and effective SOC operations.

Lead SecOps discovery workshops to assess current SOC maturity and identify gaps in detection, response, and escalation processes. Develop and implement robust Microsoft Sentinel architectures, including data onboarding, analytics rules, and automation playbooks. Operationalize Microsoft Defender XDR to improve alert fidelity and investigation depth across various security signals. Create KQL hunting logic, incident triage workflows, and response playbooks to boost analyst productivity. Apply agentic SOC principles for safe and auditable automation, ensuring human oversight.

Collaborate with security architects, customer SOC leaders, and product teams to resolve risks and drive customer success. Support pre-sales activities by providing effort estimations, technical insights, and solution demonstrations.

We are seeking candidates with at least 5 years of experience in cybersecurity consulting, security operations, or related delivery roles. A strong background in Microsoft Sentinel and at least two Microsoft Defender workloads is essential. Deep understanding of detection engineering, incident response, threat hunting, and SOC operating models is required.

Proficiency in KQL, Microsoft security logs, and common attack techniques is necessary. Excellent communication skills are vital for conveying complex security concepts to various stakeholders, including executives. A degree or equivalent experience in Computer Science, Engineering, Information Security, or a related field is expected.

Preferred qualifications include experience with ITSM, CMDB, and threat intelligence integrations, as well as a growth mindset for continuous learning and application of new security capabilities.