Security Engineer

• Reports To: Senior Manager, Security Engineering
• BlueVoyant is seeking a Security Engineer II to join our Deployment Engineering team, focused on enabling our Managed Detection and Response (MDR) solutions in customer environments. This fully remote role uses your expertise in Microsoft Cloud security technologies and SIEM platforms to lead client-facing SIEM and XDR technical enablement projects, including hands-on deployment of a broad range of Microsoft Security and Azure solutions
• Deliver Microsoft Sentinel and Defender implementations for customers remotely, from design and architecture through deployment and use case tuning
• Create and develop new detection, automation, and reporting use cases based on customer requirements
• Define and assist in building operational and executive security reports and dashboards
• Lead XDR integration activities across the Microsoft and Azure product stacks, applying Microsoft XDR and Zero Trust Architecture principles
• Serve as the lead technical delivery resource within a team for small to large client-facing projects
• Participate in research and development activities to drive process improvement and new product and feature enhancements
• Support client-facing environments on an ongoing basis to help mature and maintain our MDR practices
• Lead hands-on Microsoft Sentinel, Defender, and Azure deployments that directly shape how customers detect and respond to threats
• Work at the intersection of cloud security engineering, detection content, and customer delivery, building scalable solutions across diverse enterprise environments
• Join a global, mission-driven cybersecurity company defending organizations worldwide with cutting-edge data, technology, and expertise

Benefits

• Medical coverage for employees and their dependents
• Dental coverage for employees and their dependents
• Vision coverage for employees and their dependents
• Life insurance
• Short-term and long-term disability
• Retirement/401(k) plans (US & Canada)
• Generous paid time off (PTO)
• Extensive paid holiday schedule

• Strong experience with Azure Cloud technologies
• Familiarity with Microsoft XDR and Zero Trust Architecture models
• Hands-on experience deploying and/or managing Microsoft Sentinel
• Hands-on experience deploying and/or managing Microsoft Defender security products (e.g., Defender for Endpoint, Identity, Cloud Apps, Office 365, Defender for Cloud)
• Knowledge of enterprise IT systems as they relate to cybersecurity
• Excellent communication skills and the ability to thrive in a dynamic, fast-paced team environment
• 5+ years of technical experience with Microsoft Cloud Security technologies or equivalent SIEM and XDR solutions
• Hands-on engineering experience with SIEM and/or XDR technologies in production environments
• Experience with query languages and/or script development (KQL, SPL, SQL, PowerShell, or similar)
• Relevant Microsoft certifications (e.g., SC-200, AZ-500) are a plus
• Bachelor’s degree in a related field or equivalent professional experience and certifications
• Expertise in Kusto Query Language (KQL), including Sentinel Analytic Rules and Defender Custom Detection Rules
• Expertise in Azure Logic Apps, Function Apps, and other Azure technologies
• Incident investigation and response skills
• Experience in customer-facing roles
• Proficiency in Python, PowerShell, or C#/.NET
• Proficiency in Linux configuration and common administration tasks
• Experience with non-Microsoft SIEM or EDR tools