Overview
Skills
Job Details
Microsoft Sentinel SOAR & UEBA Engineer
We are hiring a Software Developer II with strong Microsoft Sentinel, SOAR, and UEBA expertise for a long-term engagement
Location: Austin, TX
LOCAL CANDIDATES ONLY – 5 Days Onsite (Mandatory)
Client : Texas state client
Interviews: In-person & Microsoft Teams
Role Overview
This is a senior-level, hands-on engineering role focused on building and optimizing Microsoft Sentinel SOAR automation, UEBA analytics, and SIEM content for critical state health systems.
Key Responsibilities
Design & deploy Sentinel SOAR playbooks using Azure Logic Apps, Functions & REST APIs
Build UEBA detection rules, anomaly models & advanced KQL hunting queries
Develop custom data connectors, parsers, dashboards & workbooks
Integrate Sentinel with EDR, IAM, ticketing systems & firewalls
Tune SIEM platform aligned to MITRE ATT&CK & Zero Trust
Develop scripts & microservices (Python, PowerShell, .NET)
Collaborate with DSHS, HHSC CISO Office & cross-functional teams
Provide Tier III Sentinel engineering support
Required Qualifications
Bachelor’s degree in CS, Cybersecurity, or related field
2+ years experience in software, cloud, SIEM, or cybersecurity engineering
Strong knowledge of Microsoft Sentinel, Azure, KQL & SOAR
Preferred Skills
3+ years hands-on Microsoft Sentinel experience
UEBA / behavioral analytics development
Sentinel SOAR playbooks & automation
Azure DevOps / GitHub CI-CD
Government, healthcare, or regulatory environment experience
Microsoft certs (SC-200, AZ-104, SC-100, SC-300)