Global Technical Talent, an Inc. 5000 Company · 6 hours ago
Senior Security Operations Engineer
Global Technical Talent is a leading provider of data storage solutions, committed to innovation, sustainability, and employee development. They are seeking a Senior Security Operations Engineer with expert-level Microsoft Sentinel engineering experience to support SIEM engineering, advanced threat detection development, and security operations maturity.
CRMHuman ResourcesInformation TechnologyStaffing Agency
Responsibilities
Engineer and tune Microsoft Sentinel data connectors, analytic rules, content packs, and automation playbooks
Build KQL-based detections , custom analytics, hunting queries, and watchlists
Manage and optimize log ingestion pipelines , including WindowsEvent, SecurityEvent, and NxLog sources
Design and maintain SOAR automation using Logic Apps
Migrate legacy detection and hunting workflows into Sentinel’s Threat Hunting module
Partner with SOC and IR teams to improve signal fidelity and detection quality
Conduct advanced threat hunting using KQL and Sentinel workbooks
Convert threat intelligence into actionable detections
Identify detection gaps and expand coverage across identity, endpoint, and cloud telemetry
Review CrowdStrike IOA detections and build complementary Sentinel detections
Integrate CrowdStrike EASM insights into detection workflows
Support endpoint engineering related to USB security, SSH visibility, certificates, and firewall controls
Integrate credential risk signals into Sentinel detections
Build detections for abnormal authentication behavior and correlated identity attacks
Provide Tier 3 engineering support for Sentinel alerts and endpoint incidents
Support high-severity investigations requiring deep log correlation
Produce engineering documentation, SOPs, playbooks, and runbooks
Deliver full knowledge transfer at the conclusion of the contract
Qualification
Required
Extensive hands-on Microsoft Sentinel engineering experience
Strong proficiency in KQL
Experience building analytic rules, hunting queries, SOAR playbooks, and SIEM data models
Hands-on experience with CrowdStrike Falcon (EDR, IOA, EASM, firewall)
Strong understanding of MITRE ATT&CK and modern detection engineering practices
Broad troubleshooting skills across Windows, Linux, identity, and cloud environments
Preferred
Experience migrating legacy SIEM workflows into Sentinel
Experience with identity risk and credential monitoring tools
Scripting experience with PowerShell or Python
Experience supporting OT, factory, or production environments
Benefits
Medical, Vision, and Dental Insurance Plans
401(k) Retirement Fund
Company
Global Technical Talent, an Inc. 5000 Company
Global Technical Talent (GTT) is a leading provider of Total Talent Solutions and a proud subsidiary of Chenega Corporation(www.chenega.com), a Native American corporation with over $1.5 billion in revenue and 7,200 U.S.