Cybersecurity / SIEM Engineer (Microsoft Sentinel)

Position Overview

Cybersecurity / SIEM Engineer (Microsoft Sentinel)

Location: 701 W. 51st Street, Austin, TX 78751

Work Mode: 100% Onsite (Local candidates only)

Duration: 12+ months

Work Schedule: Monday-Friday, 8:00 AM - 5:00 PM (CT)

Seeking a skilled Cybersecurity / SIEM Engineer to support security monitoring, analytics, and automation initiatives. The role focuses on Microsoft Sentinel, security analytics, UEBA, SOAR, and cloud/security integrations in a regulated government environment.

Key Responsibilities

• Administer, configure, and optimize Microsoft Sentinel
• Develop and tune security analytics rules, UEBA models, and anomaly detection
• Build and maintain SOAR automation playbooks
• Integrate Sentinel with EDR, IAM, firewalls, and ticketing systems
• Monitor and analyze security events and incidents
• Support compliance, audit, and regulatory security requirements
• Collaborate with cloud, DevOps, and cybersecurity teams
• Maintain documentation and operational procedures
• Support after-hours security operations as needed

Required Qualifications

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or related field
• 2+ years of experience in:
  • Cybersecurity engineering
  • SIEM engineering
  • Cloud engineering
  • Software development
• Strong knowledge of security monitoring and incident response concepts
• Excellent communication and documentation skills
• Ability to work onsite in Austin, TX

Preferred Qualifications

• 3+ years of hands-on experience with Microsoft Sentinel
• Experience developing:
  • UEBA models
  • Behavior-based analytics
  • SOAR automation playbooks
• Microsoft certifications (preferred, not required): SC-200, AZ-900, AZ-104, SC-100, SC-300
• Experience integrating Sentinel with:
  • EDR solutions
  • IAM platforms
  • Firewalls
  • Ticketing systems
• Experience with DevOps pipelines (GitHub, Azure DevOps)
• Prior experience in government, healthcare, or regulated environments