What are the responsibilities and job description for the Microsoft Sentinel SIEM Engineer position at InnoCore Solutions, Inc.?
Responsibilities:
- Configure and manage Microsoft Sentinel SIEM for enterprise security monitoring.
- Develop and maintain security detections, analytics rules, and KQL queries.
- Monitor security alerts and investigate security incidents.
- Perform threat hunting and support incident remediation activities.
- Build automation playbooks using Microsoft Sentinel and Logic Apps.
- Integrate security logs from Microsoft and third-party systems.
- Support PKI infrastructure including certificate monitoring and certificate lifecycle management.
- Monitor Active Directory Certificate Services (AD CS), Certificate Authorities, CRLs, and authentication events.
- Create dashboards, workbooks, and security reports.
- Collaborate with security and infrastructure teams to improve enterprise security.
Requirements:
- 5 years of experience supporting enterprise SIEM platforms.
- Hands-on experience with Microsoft Sentinel administration, monitoring, and detection engineering.
- Experience with KQL, analytics rules, and automation.
- PKI Engineering: Demonstrable understanding of PKI solution design and operations: enrollment protocols (SCEP, EST), Certificate Policy / Certification Practice Statement (CP/CPS), trusted roles, Levels of Assurance, NIST SP 800-63, and real use cases such as certificate-based authentication and software signing/validation.
- Knowledge of incident detection, investigation, and remediation.
- Experience with Microsoft Defender, Microsoft Entra ID, and cloud security.
- Strong troubleshooting, analytical, and communication skills.
- Nice to have: Hands-on AI/agentic security tooling (e.g., Claude / LLM-assisted code & configuration analysis, prompt engineering for security use cases)
Education:
- Bachelor's degree in Computer Science/Engineering or a related field