Job description

Position: Senior Security Engineer Reports To: Senior Manager, Security Engineering Department: Deployment Engineering, Microsoft Location: Remote, US Work Authorization: US Citizenship Required BlueVoyant is seeking an experienced Senior Security Engineer to join our Deployment Engineering team, focused on enabling our Managed Detection and Response (MDR) solutions in customer environments. This fully remote role uses your advanced knowledge of Microsoft Cloud security technologies and SIEM platforms to lead large and enterprise-sized SIEM and XDR technical enablement projects, including hands-on deployment of a comprehensive range of Microsoft Security and Azure solutions. What You'll Do: • Lead complex Microsoft Sentinel and Defender XDR implementations for customers remotely, from design and architecture through deployment and use case tuning. • Create and develop new detection, automation, and reporting use cases based on customer requirements. • Assess and report on the maturity of client SIEM and XDR deployments, recommending improvements. • Define and assist in building operational and executive security reports and dashboards. • Lead XDR integration activities across the Microsoft and Azure product stacks, applying Microsoft XDR and Zero Trust Architecture principles. • Serve as a strategic and lead technical delivery resource for large and enterprise client-facing projects. • Act as a lead on the Deployment Engineering team, mentoring mid-level and junior engineers. • Participate in research and development activities to drive process improvement and new product and feature enhancements. • Identify and implement improvements to processes and technical enablement. • Support client-facing environments on an ongoing basis to help mature and maintain our MDR practices. • Contribute to knowledge sharing through internal documentation, lunch and learns, and public-facing blogs. What You'll Bring: • 8+ years of technical experience enabling security technologies, with a focus on Microsoft Cloud Security or equivalent SIEM and XDR solutions. • Strong hands-on experience deploying and/or managing Microsoft Sentinel. • Strong hands-on experience deploying and/or managing Microsoft Defender security products (e.g., Defender for Endpoint, Identity, Cloud Apps, Office 365, Defender for Cloud). • Hands-on engineering experience with SIEM and/or XDR technologies in enterprise production environments. • Strong experience with Azure Cloud technologies. • Experience with query languages and/or script development (KQL, SPL, SQL, PowerShell, or similar). • Knowledge of enterprise IT systems as they relate to cybersecurity. • Familiarity with Microsoft XDR and Zero Trust Architecture models. • Excellent communication skills and the ability to thrive in a dynamic, fast-paced team environment. Nice to Have: • Expertise in Kusto Query Language (KQL), including Sentinel Analytic Rules and Defender Custom Detection Rules. • Expertise in Azure Logic Apps, Function Apps, and other Azure technologies. • Expertise with Microsoft 365 productivity solutions (Exchange Online, Teams, SharePoint). • Expertise with Microsoft Intune. • Experience in customer-facing roles. • Incident investigation and response skills. • Proficiency in Python, PowerShell, or C#/.NET. • Proficiency in Linux configuration and common administration tasks. Education: • Bachelor's degree in a related field or equivalent professional experience and certifications. • Relevant Microsoft certifications (e.g., SC-200, AZ-500) are a plus. Why BlueVoyant? • Lead enterprise-scale Microsoft Sentinel, Defender XDR, and Azure deployments that directly shape how large organizations detect and respond to threats. • Grow as a technical leader, mentoring engineers and shaping how our Deployment Engineering team delivers across diverse enterprise environments. • Join a global, mission-driven cybersecurity company defending organizations worldwide with cutting-edge data, technology, and expertise. • Competitive compensation and a comprehensive benefits package, with support for wellbeing, development, and career growth. About BlueVoyant BlueVoyant is an AI-driven cybersecurity company dedicated to standing between our customers and cyber threats. By combining human, artificial, and proprietary intelligence, we deliver a unified solution that protects every organization's network, identities, vendors, and digital footprints as a single attack surface. The company's award-winning Microsoft Security expertise helps organizations maximize their security investments while reducing risk and ensuring compliance. Led by CEO, John Hernandez, BlueVoyant's highly skilled team includes former government cyber officials with extensive frontline experience in responding to advanced cyber threats on behalf of the National Security Agency, Federal Bureau of Investigation, Unit 8200, and GCHQ, together with private sector experts. BlueVoyant services utilize large real-time datasets with industry leading analytics and technologies. Founded in 2017 by Fortune 500 executives, including Chairman of the Board, Jim Rosenthal, Vice Chairman, Tom Glocer, and former Government cyber officials, BlueVoyant is headquartered in New York City and has offices in Maryland, Tel Aviv, London, Budapest, and Latin America and is committed to building a workplace where talented people are empowered to do their best work in the fight against global cyber threats. All employees must be authorized to work in the United States of America. BlueVoyant provides equal employment opportunities to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability, or genetics. In addition to federal law requirements, BlueVoyant complies with applicable state and local laws governing non-discrimination in employment in every location in which the company has facilities. Disclaimer: Please note that pursuant to contractual requirements and applicable law, for employees to perform work on some of the company's federal contracts, U.S. citizenship is required. Accordingly, an employee's ability to perform work on such contracts is contingent upon the company's verification of the employee's citizenship status. #LI-AH1 #LI-Remote Important Information for Applicants: BlueVoyant uses AI-assisted tools within our applicant tracking system to help identify candidates whose experience and skills best match the requirements of a role. This technology provides hiring teams with added insights to support fair and efficient hiring decisions. All applications are reviewed by a member of our hiring team, and final hiring decisions are made by humans, not AI. By submitting your application, you acknowledge that AI tools may assist in the evaluation of your resume as part of the recruitment process. Interview Expectations: As part of our interview process, we assess your experience through real-time discussion, so we expect responses to be your own. While we embrace the use of AI within our business and recruitment process, we do not permit its use during interviews. Any suspected use of AI during an interview will be challenged, and this may include the use of detection tools. BlueVoyant Candidate Privacy Notice: To understand how we secure and manage your personal data upon submitting a job application, please see our Candidate Privacy Notice, which can be found here - Candidate Privacy Notice

Requirements

Must-haves

Position: Senior Security Engineer
Reports To: Senior Manager, Security Engineering
Department: Deployment Engineering, Microsoft
Location: Remote, US
Work Authorization: US Citizenship Required
Lead complex Microsoft Sentinel and Defender XDR implementations for customers remotely, from design and architecture through deployment and use case tuning.
Create and develop new detection, automation, and reporting use cases based on customer requirements.
Assess and report on the maturity of client SIEM and XDR deployments, recommending improvements.
Define and assist in building operational and executive security reports and dashboards.
Lead XDR integration activities across the Microsoft and Azure product stacks, applying Microsoft XDR and Zero Trust Architecture principles.
Serve as a strategic and lead technical delivery resource for large and enterprise client-facing projects.
Act as a lead on the Deployment Engineering team, mentoring mid-level and junior engineers.
Participate in research and development activities to drive process improvement and new product and feature enhancements.
Identify and implement improvements to processes and technical enablement.
Support client-facing environments on an ongoing basis to help mature and maintain our MDR practices.
Contribute to knowledge sharing through internal documentation, lunch and learns, and public-facing blogs.
What You'll Bring: • 8+ years of technical experience enabling security technologies, with a focus on Microsoft Cloud Security or equivalent SIEM and XDR solutions.
Strong hands-on experience deploying and/or managing Microsoft Sentinel.
Strong hands-on experience deploying and/or managing Microsoft Defender security products (e.g., Defender for Endpoint, Identity, Cloud Apps, Office 365, Defender for Cloud).
Hands-on engineering experience with SIEM and/or XDR technologies in enterprise production environments.
Strong experience with Azure Cloud technologies.
Experience with query languages and/or script development (KQL, SPL, SQL, PowerShell, or similar).

Nice-to-haves

Nice to Have: • Expertise in Kusto Query Language (KQL), including Sentinel Analytic Rules and Defender Custom Detection Rules.
Relevant Microsoft certifications (e.g., SC-200, AZ-500) are a plus.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

azuresqlpythonai

Platform: jazzhr
Effort: medium