Senior Security Engineer

• BlueVoyant is seeking an experienced Senior Security Engineer to join our Deployment Engineering team, focused on enabling our Managed Detection and Response (MDR) solutions in customer environments
• This fully remote role uses your advanced knowledge of Microsoft Cloud security technologies and SIEM platforms to lead large and enterprise-sized SIEM and XDR technical enablement projects, including hands-on deployment of a comprehensive range of Microsoft Security and Azure solutions
• Lead complex Microsoft Sentinel and Defender XDR implementations for customers remotely, from design and architecture through deployment and use case tuning
• Create and develop new detection, automation, and reporting use cases based on customer requirements
• Assess and report on the maturity of client SIEM and XDR deployments, recommending improvements
• Define and assist in building operational and executive security reports and dashboards
• Lead XDR integration activities across the Microsoft and Azure product stacks, applying Microsoft XDR and Zero Trust Architecture principles
• Serve as a strategic and lead technical delivery resource for large and enterprise client-facing projects
• Act as a lead on the Deployment Engineering team, mentoring mid-level and junior engineers
• Participate in research and development activities to drive process improvement and new product and feature enhancements
• Identify and implement improvements to processes and technical enablement
• Support client-facing environments on an ongoing basis to help mature and maintain our MDR practices
• Contribute to knowledge sharing through internal documentation, lunch and learns, and public-facing blogs
• Lead enterprise-scale Microsoft Sentinel, Defender XDR, and Azure deployments that directly shape how large organizations detect and respond to threats
• Grow as a technical leader, mentoring engineers and shaping how our Deployment Engineering team delivers across diverse enterprise environments
• Join a global, mission-driven cybersecurity company defending organizations worldwide with cutting-edge data, technology, and expertise

Benefits

• Medical coverage for employees and their dependents
• Dental coverage for employees and their dependents
• Vision coverage for employees and their dependents
• Life insurance
• Short-term and long-term disability
• Retirement/401(k) plans (US & Canada)
• Generous paid time off (PTO)
• Extensive paid holiday schedule

• Familiarity with Microsoft XDR and Zero Trust Architecture models
• Knowledge of enterprise IT systems as they relate to cybersecurity
• Strong hands-on experience deploying and/or managing Microsoft Defender security products (e.g., Defender for Endpoint, Identity, Cloud Apps, Office 365, Defender for Cloud)
• 8+ years of technical experience enabling security technologies, with a focus on Microsoft Cloud Security or equivalent SIEM and XDR solutions
• Strong experience with Azure Cloud technologies
• Excellent communication skills and the ability to thrive in a dynamic, fast-paced team environment
• Experience with query languages and/or script development (KQL, SPL, SQL, PowerShell, or similar)
• Hands-on engineering experience with SIEM and/or XDR technologies in enterprise production environments
• Strong hands-on experience deploying and/or managing Microsoft Sentinel
• Bachelor’s degree in a related field or equivalent professional experience and certifications
• Relevant Microsoft certifications (e.g., SC-200, AZ-500) are a plus
• Expertise in Kusto Query Language (KQL), including Sentinel Analytic Rules and Defender Custom Detection Rules
• Expertise with Microsoft 365 productivity solutions (Exchange Online, Teams, SharePoint)
• Expertise in Azure Logic Apps, Function Apps, and other Azure technologies
• Incident investigation and response skills
• Expertise with Microsoft Intune
• Experience in customer-facing roles
• Proficiency in Python, PowerShell, or C#/.NET
• Proficiency in Linux configuration and common administration tasks