ZipRecruiter

Log In

1

Azure Sentinel Siem Engineer Jobs (NOW HIRING)

Jobtailor

DevSecOps Engineer

Columbus, OH · On-site

$49.25 - $67.50/hr

Experience implementing Azure Sentinel, SIEM solutions, security monitoring, and incident response ... Azure DevOps Soft Skills * Analytical Problem-Solving * Collaboration Certifications ...

Mace

IT Network Manager

New York, NY · Hybrid

$150K/yr

Monitor and optimize network performance using tools like Azure Sentinel and SIEM platforms. * Manage Windows 11 environments, including deployment and configuration using AutoPilot. * Administer ...

CESO, Inc.

DevSecOps Engineer

Dayton, OH · Remote

The DevSecOps Engineer owns Azure infrastructure standards, CI/CD pipelines, infrastructure ... Experience implementing Azure Sentinel, SIEM solutions, security monitoring, and incident response ...

Uw

AI Security Engineer

Seattle, WA

... using Azure Sentinel (SIEM), writing and tuning KQL queries for detection rules, alert triage, and threat hunting. - Maintain and execute incident response playbooks specific to AI platforms ...

FHLB Des Moines

AI Security Engineer

Seattle, WA · On-site

... using Azure Sentinel (SIEM), writing and tuning KQL queries for detection rules, alert triage, and threat hunting.- Maintain and execute incident response playbooks specific to AI platforms ...

CESO, Inc.

DevSecOps Engineer

Columbus, OH · Remote

The DevSecOps Engineer owns Azure infrastructure standards, CI/CD pipelines, infrastructure ... Experience implementing Azure Sentinel, SIEM solutions, security monitoring, and incident response ...

Danaher

Senior SIEM Engineer - USA Remote

$155K - $175K/yr

... Sentinel, Palo Alto XSIAM, Google SecOps (Chronicle), Humio, Elastic, and similar technologies ... Azure, and Google Cloud Platform (GCP), while translating business requirements into scalable ...

Coalfire

$77K - $105K/yr

Design, implement, and maintain SIEM platform architectures across AWS, Azure, and GCP environments ... Sentinel, Elastic, or Sumo Logic. * Experience designing or operating log collection, ingestion ...

CESO, Inc.

DevSecOps Engineer

Akron, OH · Remote

The DevSecOps Engineer owns Azure infrastructure standards, CI/CD pipelines, infrastructure ... Experience implementing Azure Sentinel, SIEM solutions, security monitoring, and incident response ...

CESO, Inc.

DevSecOps Engineer

Akron, OH · On-site

$85K - $167K/yr

The DevSecOps Engineer owns Azure infrastructure standards, CI/CD pipelines, infrastructure ... Experience implementing Azure Sentinel, SIEM solutions, security monitoring, and incident response ...

previous page

Showing results 41-60

All JobsTechnology JobsData JobsAzure Sentinel Siem Engineer Jobs

Azure Sentinel Siem Engineer information

See salary details

$25

$53

$76

How much do azure sentinel siem engineer jobs pay per hour?

As of Sep 10, 2026, the average hourly pay for azure sentinel siem engineer in the United States is $53.63, according to ZipRecruiter salary data. Most workers in this role earn between $43.27 and $62.26 per hour, depending on experience, location, and employer.

What does an Azure Sentinel SIEM engineer do?

An Azure Sentinel SIEM Engineer is responsible for designing, implementing, and managing security monitoring solutions using Microsoft Azure Sentinel, a cloud-native Security Information and Event Management (SIEM) platform. They configure data connectors, create detection rules, automate incident responses, and analyze security events to identify threats. Their role is critical in helping organizations detect, investigate, and respond to security incidents in real time, ensuring the protection of digital assets within the Azure environment.

What are the key skills and qualifications needed to thrive as an Azure Sentinel SIEM engineer, and why are they important?

To thrive as an Azure Sentinel SIEM Engineer, you need a strong background in cybersecurity, incident response, and security information and event management, typically supported by a degree in computer science or a related field. Experience with Microsoft Azure Sentinel, Kusto Query Language (KQL), and certifications like Microsoft Certified: Security Operations Analyst Associate are highly valued. Analytical thinking, attention to detail, and strong communication skills are critical for investigating threats and collaborating with stakeholders. These skills ensure effective threat detection, timely incident response, and robust protection of organizational assets in a cloud environment.

What are some common challenges faced by Azure Sentinel SIEM engineers and how can they be managed?

Azure Sentinel SIEM Engineers often face challenges such as tuning detection rules to minimize false positives, integrating diverse data sources, and keeping up with evolving security threats. To manage these, it’s important to collaborate closely with security analysts, regularly review and refine analytic rules, and leverage automation for incident response. Additionally, staying updated with Microsoft documentation and engaging with the security community can help address integration and threat detection challenges effectively.

What is the difference between Azure Sentinel Siem Engineer vs Security Analyst?

AspectAzure Sentinel Siem EngineerSecurity Analyst
CertificationsAzure Security, SIEM, Cloud certificationsCompTIA Security+, CISSP, CEH
Work EnvironmentCloud-based SIEM management, security monitoringNetwork, endpoint, and application security analysis
Industry UsageIT, cybersecurity, cloud service providersFinancial, healthcare, government sectors

The Azure Sentinel Siem Engineer focuses on deploying, configuring, and managing Azure Sentinel for security monitoring in cloud environments. In contrast, a Security Analyst performs broader security analysis across various systems, often including incident response and threat detection. While both roles require security certifications and involve security monitoring, the engineer specializes in cloud SIEM tools, whereas the analyst has a more general security oversight role.

What are popular job titles related to Azure Sentinel Siem Engineer jobs?

For Azure Sentinel Siem Engineer jobs, the most frequently searched job titles are:

IT - Consultant - Infrastructure Management | Enterprise Mobility Solution | MS Azure AD, MS Azure R

Pittsburgh, PA • On-site

Spruce Infotech
IT Services • 1 - 10 employees
Learn more about Spruce Infotechexternal

$61.75 - $80.25/hr

Full-time

Re-posted 19 days ago

Job description

POC: Brenda
• Job title: Consultant
• Duration of the project: 9 Months
• Work Location with Zip code: 15219 onsite from Day-1
• Is this an 100% remote role? - No
• Vendor Rate Range (min to max rate you can offer): XXX to XXX
• Do you have budget approved for this request? Yes
• Minimum years of experience required: 8+
• Would you require the candidates to meet you for in person interview? - YES
• Is Skype/WebEx interview, OK? - Yes , Video mode interview .
• Please Confirm Must Have Skills (TOP 3 SKILLS) -
Azure IAM - Microsoft Entra ID administration, including PIM, JIT elevation, and Conditional Access for privileged roles,RBAC
MFA, Microsoft Sentinel (SIEM), Identity Monitoring, Audit & Compliance, Azure Policy, Management Groups, Managed Identities, Azure AD-based admin configs, Azure Monitor, Log Analytics (KQL)
Secrets Management - Azure Key Vault , Microsoft Graph API, Azure CLI
• Please provide a Detailed Job Description. (Word Document if any).
Required Skills/ Experience
Deep hands-on expertise with Microsoft Entra ID (Azure AD), Azure RBAC, security groups, PIM, and JIT workflows
Strong Azure Policy and resource configuration: enable managed identities, provision Azure AD admin roles (e.g., Azure SQL), minimize local service keys
Strong authenticator management and MFA for privileged roles (e.g., smartcards, FIDO2 security keys) with enforced session configuration norms
NIST SP 800-53 FedRAMP High controls expertise relevant to IAM
Experience in highly regulated environments (federal/financial services)
Azure-native monitoring/logging for identity/access events (e.g., Entra sign-in/audit logs, Azure Monitor), AAA alignment, and alert routing to service owners/security teams
Access governance and documentation: author/maintain IAM policies/standards/SOPs, conduct periodic access reviews, support audit evidence and control tests
Baseline configuration management and accurate asset/data inventories aligned to enterprise configuration practices
Secret hygiene: eliminate static credentials in code/images; enforce password and authenticator protection
Preferred Skills/ Experience
Experience aligning Azure IAM/RBAC with internal policies/standards and external frameworks (e.g., SOX, ISO, NIST)
Exposure to application identity design patterns, least-privilege for service principals, and CI/CD controls for secret management (e.g., Key Vault, pipeline secret scanning
Advanced authenticator management
Required Software/ Technology
Microsoft Entra ID administration, including PIM, JIT elevation, and Conditional Access for privileged roles
Azure RBAC across management group/subscription/resource scopes, custom role design, and enterprise role taxonomy
Azure governance with Azure Policy and Management Groups to enforce least-privilege guardrails
MFA with strong authenticators (FIDO2 security keys, smartcards) and Microsoft Authenticator configuration
Managed Identities for Azure services and Azure Key Vault integration to eliminate local service keys
Monitoring and logging via Azure Monitor, Activity Logs, Diagnostic Settings, and Log Analytics (KQL)
Security operations integration with Microsoft Sentinel (SIEM) and Microsoft Defender for Cloud
Administration and automation using PowerShell (Az and Microsoft Graph), Azure CLI, and Microsoft Graph API
Inventory and configuration governance using Azure Resource Graph, tagging strategies, and naming conventions
Preferred Software/ Technology
PowerShell; Azure CLI
Experience with CI/CD and DevSecOps integrations
Required Education/ Certifications
Preferred Education/ Certifications
Microsoft SC-300 (Identity and Access Administrator)
Microsoft AZ-500 (Azure Security Engineer)
CISSP or CCSP (nice to have)

Apply