We are seeking a highly skilled and experienced SIEM Security Engineer with expertise in Microsoft Sentinel. In this role, you will be responsible for designing, implementing, and maintaining the security information and event management (SIEM) system to detect, analyze, and respond to security incidents effectively.

This is a hybrid 3 days onsite opportunity based in Wilmington DE. Candidate that are unable to be onsite will not be considered.

Design, configure, deploy, and maintain the Microsoft Sentinel SIEM platform as the primary SIEM solution.

Collaborate with cross-functional teams to gather requirements and translate them into technical specifications for implementing SIEM use cases.

Monitor and analyze security events, logs, and alerts generated by various security systems and devices integrated with the SIEM platform.

Investigate and respond to security incidents, perform root cause analysis, and recommend remediation actions to prevent future incidents.

Conduct regular health checks, performance tuning, and capacity planning of the SIEM infrastructure.

Qualifications:

Bachelor's degree in Computer Science, Information Security, or a related field or equivalent experience. Relevant certifications (e.g., CISSP, GSEC, GIAC) are highly desirable.

Proven experience in designing, implementing, and managing SIEM solutions, with a specific focus on Microsoft Sentinel.

In-depth knowledge of security event management, log aggregation, and correlation techniques.

Strong understanding of security concepts, network protocols, and common security technologies (firewalls, IDS/IPS, WAF, etc.).

Proficiency in scripting and query languages (e.g., PowerShell, Python, SQL) for custom rule development and data analysis.

Familiarity with cloud-based security solutions, such as Azure Security Center, AWS Security Hub, or Google Cloud Security Command Center.