ZipRecruiter

Log In

1

Azure Sentinel Soc Jobs (NOW HIRING)

1 point system

MS Sentinel Engineer/SME

New York, NY · Remote

Sentinel is already deployed, but this individual will drive the core buildout, integration, and ... SOC), Incident Response, Azure Cloud Security Required Skills and Knowledge · Extensive SOC ...

ITI Solutions, Inc

CSSP Analyst, Senior

Indianapolis, IN · On-site

$91K - $120K/yr

Prior 24/7 SOC experience in DoD environment * Threat intelligence experience * Experience with Azure Sentinel KQL queries * Digital forensics certifications * Experience with classified network ...

Tek Ninjas

Senior Cyber Security Engineer

Dallas, TX · On-site

$113K - $155K/yr

... Azure Sentinel / Microsoft Sentinel, Prisma Cloud, Wiz. Preferred Experience * Experience in SOC environments and incident response teams. * Experience with enterprise cloud migration security.

GFR Technologies SE

Ingeniero/a SIEM

Mineral Springs, NC · On-site

$58.25 - $75.50/hr

Certificaciones Splunk Architect, Azure Sentinel, GCIA, GCIH o CISSP. * Experiencia en SOC 24x7 o entornos enterprise. * Conocimiento de diseno de capacidades SOC y reporting ejecutivo. Competencias ...

next page

Showing results 1-20

All JobsTechnology JobsAzure Sentinel Soc Jobs

Azure Sentinel Soc information

See salary details

$61K

$103K

$129K

How much do azure sentinel soc jobs pay per year?

As of Sep 10, 2026, the average yearly pay for azure sentinel soc in the United States is $103,000.00, according to ZipRecruiter salary data. Most workers in this role earn between $72,500.00 and $122,500.00 per year, depending on experience, location, and employer.

What is an Azure Sentinel SOC?

An Azure Sentinel SOC (Security Operations Center) is a team or function that uses Microsoft Azure Sentinel, a cloud-native security information and event management (SIEM) tool, to monitor, detect, investigate, and respond to cybersecurity threats across an organization’s IT environment. The SOC team leverages Sentinel’s analytics, automation, and AI capabilities to enhance threat detection and incident response. By centralizing security data and automating routine tasks, an Azure Sentinel SOC helps protect organizations from evolving cyber threats.

What are the key skills and qualifications needed to thrive as an Azure Sentinel SOC analyst?

To thrive as an Azure Sentinel SOC Analyst, you need expertise in cybersecurity principles, incident response, and familiarity with cloud environments, typically supported by a degree in information security or related certifications like Microsoft Security Operations Analyst (SC-200). Proficiency in Azure Sentinel, SIEM tools, threat intelligence platforms, and scripting languages such as KQL and PowerShell is essential. Strong analytical thinking, attention to detail, and effective communication enable analysts to quickly identify threats and collaborate on mitigation strategies. These skills ensure rapid detection and response to security incidents, protecting organizational assets in an evolving threat landscape.

What are some common challenges faced by Azure Sentinel SOC analysts in managing security incidents?

Azure Sentinel SOC analysts often face challenges such as handling high volumes of security alerts, prioritizing incidents effectively, and ensuring timely response to potential threats. Analysts must also adapt to the evolving nature of cyber threats and continuously update their detection rules and playbooks. Collaboration with IT teams and business stakeholders is crucial, as is staying familiar with the latest features and best practices within Azure Sentinel to maximize the platform’s capabilities.

What is the difference between Azure Sentinel Soc vs Security Analyst?

AspectAzure Sentinel SocSecurity Analyst
CertificationsAzure Security, SIEM certificationsCompTIA Security+, CISSP, CEH
Work EnvironmentSecurity Operations Center (SOC), cloud-focusedCorporate security teams, various environments
ResponsibilitiesMonitoring Azure Sentinel alerts, incident response, threat huntingAnalyzing security data, incident investigation, policy enforcement

Azure Sentinel Soc professionals focus on managing cloud-based security alerts within Azure Sentinel, while Security Analysts handle broader security tasks across various platforms. Both roles require security certifications and involve incident response, but Azure Sentinel Soc specialists are more specialized in cloud security operations.

What are popular job titles related to Azure Sentinel Soc jobs?

For Azure Sentinel Soc jobs, the most frequently searched job titles are:

Infographic showing various Azure Sentinel Soc job openings in the United States as of August 2026, with employment types broken down into 91% Full Time, 1% Part Time, and 8% Contract. Highlights an 77% Physical, 7% Hybrid, and 16% Remote job distribution, with an average salary of $103,000 per year, or $49.5 per hour.

MS Sentinel Engineer/SME

New York, NY • Remote

1 point system
IT Services • 51 - 200 employees
Learn more about 1 point systemexternal

Contractor

Re-posted 19 days ago

Job description

This role is a hands-on Azure Sentinel expert responsible for leading a greenfield Sentinel build and expansion within an Azure cloud environment. Sentinel is already deployed, but this individual will drive the core buildout, integration, and operational maturity of the platform.
They will function as the technical driver—not a project manager—and are expected to come in with strong, real-world Sentinel expertise.
 

REQUIRED SKILLS

  • Expert-level proficiency in Microsoft Sentinel
  • Operating in a FedRAMP environment
  • Design and implement - Analytics rules and detections
  • Log parsing and normalization

EDUCATIONAL/SKILL/EXPERIENCE REQUIREMENTS 
Education/Experience 
·                  Bachelor’s degree in computer science, Information Technology, Cybersecurity, or a related field 
·        Equivalent combination of education and related experience 
·        5 years of experience in a Security Operations Center (SOC), Incident Response, Azure Cloud Security
Required Skills and Knowledge
·                  Extensive SOC experience (L3/Senior/Principal level), serving as an escalation point for complex and high-severity incidents
·        Expert-level proficiency in Microsoft Sentinel (Azure SIEM), with deep expertise in log ingestion, integration, data lifecycle management, and incident investigation.
·        Strong expertise in log normalization, parsing, and data quality management, ensuring high-fidelity detections
·        Demonstrated ability to optimize SIEM performance, reducing noise while improving detection accuracy and coverage
·        Experience with automation and orchestration, including Sentinel playbooks and Logic Apps to enhance response efficiency
·        Deep experience in detection engineering, including designing, implementing, and tuning analytics aligned to MITRE ATT&CK
·        Advanced KQL expertise for large-scale data analysis, threat hunting, and detection development
·        Expertise in managing and utilizing a wide range of security tools, including Next Generation Firewall, IDS/IPS, EDR, AV, MS Defender Suite, Internet Proxy, other Cloud Security Tools, etc.
·        Strong knowledge of cloud and enterprise security technologies, including Microsoft Defender suite, identity security (Entra ID), EDR/XDR, firewalls, and cloud-native controls
·        Proven leadership in threat hunting and incident response, including RCA and continuous improvement of detection and response capabilities
·        Strong communication and stakeholder engagement skills, with the ability to influence technical and non-technical teams
·        Demonstrated mentorship of SOC analysts, driving operational maturity
·        Relevant certifications (SC-200, AZ-500, CySA+) preferred
·        Strong analytical and problem-solving skills, with the ability to operate effectively in a fast-paced environment
·        Commitment to continuous learning and staying current with evolving threats and technologies