REMOTE / PART TIME Project
Global Solutions Group (GSG) is seeking a Junior Microsoft Sentinel Engineer to support an active client migration from a legacy cloud-based SIEM platform to Microsoft Sentinel. This role will work alongside a team of experienced security engineers and architects and will contribute to the deployment, tuning, and operationalization of Sentinel within the client's environment.
This is an excellent opportunity for an early-career cybersecurity professional looking to gain hands-on experience with SIEM migration efforts, cloud-native security operations, detection engineering, and security automation.
The selected candidate will support a larger project team consisting of at least two additional security professionals and will assist with use case migration, data onboarding, rule development, and validation activities throughout the engagement
Primary Responsibilities
- Assist with the migration of security monitoring capabilities from a legacy SaaS SIEM platform into Microsoft Sentinel.
- Support onboarding and validation of data sources, connectors, and log ingestion pipelines.
- Help develop, tune, and maintain Sentinel Analytics Rules and detection logic.
- Assist with mapping alerts and detections to the MITRE ATT&CK framework.
- Participate in detection engineering activities, including use case conversion and tuning.
- Support the creation and testing of Microsoft Sentinel Workbooks, Dashboards, and Hunting Queries.
- Assist with implementation and maintenance of Logic Apps and Sentinel automation playbooks.
- Participate in troubleshooting data collection, alerting, and automation issues.
- Document migration activities, configurations, and operational procedures.
- Collaborate with senior engineers, architects, and client stakeholders throughout the migration effort.
- Support knowledge transfer activities and operational readiness efforts.
Required Qualifications
· 1-3 years of cybersecurity, SOC, SIEM, or security engineering experience.
· Experience with Microsoft Sentinel analytics rules, workbooks, and hunting queries.
· Exposure to detection engineering concepts and use case development.
· Basic understanding of SIEM concepts, log management, and security monitoring.
· Familiarity with Kusto Query Language (KQL).
· Understanding of common cybersecurity attack techniques and threat detection methodologies.
· Basic knowledge of Azure services and cloud security concepts.
· Ability to analyze security events and investigate alerts.
· Strong written and verbal communication skills.
· Ability to work effectively as part of a collaborative project team.
Preferred Qualifications
· Familiarity with the MITRE ATT&CK framework.
· Experience working with Logic Apps and security automation workflows.
· Knowledge of Microsoft Defender XDR, Azure Monitor, or related Microsoft security technologies.
· Previous SOC analyst experience.
· Exposure to SIEM migration projects or security platform implementations.
· Relevant certifications such as:
· Microsoft SC-200
· Microsoft AZ-900
· Microsoft SC-900
· CompTIA Security+
