Experience implementing Microsoft Defender XDR, Microsoft Defender products, Azure Arc, or Microsoft Sentinel pricing models * Experience integrating native, third-party, or software-as-a-service ...
Experience implementing Microsoft Defender XDR, Microsoft Defender products, Azure Arc, or Microsoft Sentinel pricing models * Experience integrating native, third-party, or software-as-a-service ...
Microsoft Defender XDR * Microsoft Purview * Microsoft Entra ID * Microsoft Logic Apps * Microsoft Behavior Analytics * Experience supporting SIEM, SOAR, UEBA, or security monitoring operations.
Microsoft Defender XDR * Microsoft Purview * Microsoft Entra ID * Microsoft Logic Apps * Microsoft Behavior Analytics * Experience supporting SIEM, SOAR, UEBA, or security monitoring operations.
EDAT- Journeyman Cyber Security Engineer (Microsoft) - Zero Trus with Security Clearance
Tampa, FL · On-site
Microsoft Defender XDR * Microsoft Purview * Microsoft Entra ID * Microsoft Logic Apps * Microsoft Behavior Analytics * Experience supporting SIEM, SOAR, UEBA, or security monitoring operations.
EDAT- Journeyman Cyber Security Engineer (Microsoft) - Zero Trus with Security Clearance
Tampa, FL · On-site
Microsoft Defender XDR * Microsoft Purview * Microsoft Entra ID * Microsoft Logic Apps * Microsoft Behavior Analytics * Experience supporting SIEM, SOAR, UEBA, or security monitoring operations.
Experience implementing Microsoft Defender XDR, Microsoft Defender products, Azure Arc, or Microsoft Sentinel pricing models * Experience integrating native, third-party, or software-as-a-service ...
Experience implementing Microsoft Defender XDR, Microsoft Defender products, Azure Arc, or Microsoft Sentinel pricing models * Experience integrating native, third-party, or software-as-a-service ...
Experience implementing Microsoft Defender XDR, Microsoft Defender products, Azure Arc, or Microsoft Sentinel pricing models * Experience integrating native, third-party, or software-as-a-service ...
Experience implementing Microsoft Defender XDR, Microsoft Defender products, Azure Arc, or Microsoft Sentinel pricing models * Experience integrating native, third-party, or software-as-a-service ...
Microsoft Defender XDR * Microsoft Purview * Microsoft Entra ID * Microsoft Logic Apps * Microsoft Behavior Analytics * Experience supporting SIEM, SOAR, UEBA, or security monitoring operations.
Quick apply
Microsoft Defender XDR * Microsoft Purview * Microsoft Entra ID * Microsoft Logic Apps * Microsoft Behavior Analytics * Experience supporting SIEM, SOAR, UEBA, or security monitoring operations.
Microsoft Defender XDR * Microsoft Purview * Microsoft Entra ID * Microsoft Logic Apps * Microsoft Behavior Analytics * Experience supporting SIEM, SOAR, UEBA, or security monitoring operations.
Microsoft Defender XDR * Microsoft Purview * Microsoft Entra ID * Microsoft Logic Apps * Microsoft Behavior Analytics * Experience supporting SIEM, SOAR, UEBA, or security monitoring operations.
Microsoft Defender XDR * Microsoft Purview * Microsoft Entra ID * Microsoft Logic Apps * Microsoft Behavior Analytics * Experience supporting SIEM, SOAR, UEBA, or security monitoring operations.
Microsoft Defender XDR * Microsoft Purview * Microsoft Entra ID * Microsoft Logic Apps * Microsoft Behavior Analytics * Experience supporting SIEM, SOAR, UEBA, or security monitoring operations.
Microsoft Defender XDR * Microsoft Purview * Microsoft Entra ID * Microsoft Logic Apps * Microsoft Behavior Analytics * Experience supporting SIEM, SOAR, UEBA, or security monitoring operations.
Microsoft Defender XDR * Microsoft Purview * Microsoft Entra ID * Microsoft Logic Apps * Microsoft Behavior Analytics * Experience supporting SIEM, SOAR, UEBA, or security monitoring operations.
... Defender, Cortex XDR, or CrowdStrike, and governance, risk, or compliance work using established frameworks; Palo Alto Networks PCNSE, Certified Cybersecurity Associate, or equivalent cybersecurity ...
... Defender, Cortex XDR, or CrowdStrike, and governance, risk, or compliance work using established frameworks; Palo Alto Networks PCNSE, Certified Cybersecurity Associate, or equivalent cybersecurity ...
... Defender, Cortex XDR, or CrowdStrike, and governance, risk, or compliance work using established frameworks; Palo Alto Networks PCNSE, Certified Cybersecurity Associate, or equivalent cybersecurity ...
... Defender, Cortex XDR, or CrowdStrike, and governance, risk, or compliance work using established frameworks; Palo Alto Networks PCNSE, Certified Cybersecurity Associate, or equivalent cybersecurity ...
Our Cyber Defense & Resilience offering assists clients in defending against advanced threats by ... Experience with Palo Alto Cortex XDR, or comparable XDR platforms if approved by the client.
Our Cyber Defense & Resilience offering assists clients in defending against advanced threats by ... Experience with Palo Alto Cortex XDR, or comparable XDR platforms if approved by the client.
... Defender, Cortex XDR, or CrowdStrike, and governance, risk, or compliance work using established frameworks; Palo Alto Networks PCNSE, Certified Cybersecurity Associate, or equivalent cybersecurity ...
... Defender, Cortex XDR, or CrowdStrike, and governance, risk, or compliance work using established frameworks; Palo Alto Networks PCNSE, Certified Cybersecurity Associate, or equivalent cybersecurity ...
Security Operations Lead
Tallahassee, FL · On-site
Our Cyber Defense & Resilience offering assists clients in defending against advanced threats by ... Experience with Palo Alto Cortex XDR, or comparable XDR platforms if approved by the client.
Security Operations Lead
Tallahassee, FL · On-site
Our Cyber Defense & Resilience offering assists clients in defending against advanced threats by ... Experience with Palo Alto Cortex XDR, or comparable XDR platforms if approved by the client.
Our Cyber Defense & Resilience offering assists clients in defending against advanced threats by ... Experience with Palo Alto Cortex XDR, or comparable XDR platforms if approved by the client.
Our Cyber Defense & Resilience offering assists clients in defending against advanced threats by ... Experience with Palo Alto Cortex XDR, or comparable XDR platforms if approved by the client.
... Defender, Cortex XDR, or CrowdStrike, and governance, risk, or compliance work using established frameworks; Palo Alto Networks PCNSE, Certified Cybersecurity Associate, or equivalent cybersecurity ...
... Defender, Cortex XDR, or CrowdStrike, and governance, risk, or compliance work using established frameworks; Palo Alto Networks PCNSE, Certified Cybersecurity Associate, or equivalent cybersecurity ...
IT Security Analyst
Jacksonville, FL · On-site
Monitor and tune in-place security solutions (SIEM, EDR/XDR, SOAR, email security, DLP, CSPM) for efficient and appropriate operation. * Lead investigations into security incidents escalated beyond ...
IT Security Analyst
Jacksonville, FL · On-site
Monitor and tune in-place security solutions (SIEM, EDR/XDR, SOAR, email security, DLP, CSPM) for efficient and appropriate operation. * Lead investigations into security incidents escalated beyond ...
Monitor and tune in-place security solutions (SIEM, EDR/XDR, SOAR, email security, DLP, CSPM) for efficient and appropriate operation. * Lead investigations into security incidents escalated beyond ...
Quick apply
Monitor and tune in-place security solutions (SIEM, EDR/XDR, SOAR, email security, DLP, CSPM) for efficient and appropriate operation. * Lead investigations into security incidents escalated beyond ...
Defender Xdr information
What is Defender XDR?
Defender XDR (Extended Detection and Response) is a cybersecurity solution provided by Microsoft that integrates and automates threat detection, investigation, and response across multiple security domains such as endpoints, identities, email, and cloud applications. It provides a unified platform to help security teams identify and respond to sophisticated cyber threats more efficiently. By correlating data and alerts from various sources, Defender XDR enables organizations to detect complex attacks, reduce response times, and improve overall security posture.
What are the key skills and qualifications needed to thrive as a Defender XDR specialist?
To excel as a Defender XDR Specialist, you need a solid understanding of cybersecurity principles, threat detection, and incident response, often supported by certifications like CompTIA Security+ or Microsoft Certified: Security Operations Analyst Associate. Familiarity with Microsoft Defender XDR, SIEM tools, and other security platforms is crucial for monitoring and analyzing threats. Strong analytical thinking, attention to detail, and effective communication skills help you interpret complex security data and collaborate with IT teams. These skills are essential for proactively identifying and mitigating cyber threats, ensuring robust organizational security.
What are some common challenges faced by professionals working with Microsoft Defender XDR, and how can they be addressed?
Professionals working with Microsoft Defender XDR often encounter challenges such as integrating multiple security tools, managing a high volume of alerts, and staying updated with evolving threats. To address these, it's important to develop a strong understanding of the XDR platform, establish clear incident response processes, and leverage automation features to reduce manual workloads. Collaboration with IT, security, and compliance teams is also key to maintaining a cohesive security posture and ensuring timely resolution of incidents.
What is the difference between Defender Xdr vs Security Analyst?
| Aspect | Defender Xdr | Security Analyst |
|---|---|---|
| Certifications | CompTIA Security+, CISSP, CEH | CompTIA Security+, CISSP, CEH |
| Work Environment | Security tools, incident response, threat detection | Monitoring, analyzing security data, incident investigation |
| Employer & Industry Usage | Cybersecurity teams, IT departments | Security teams, IT departments, consulting firms |
While both Defender Xdr and Security Analysts work in cybersecurity, Defender Xdr focuses on deploying and managing extended detection and response tools, whereas Security Analysts analyze security data and respond to incidents. Defender Xdr specialists often implement and configure security solutions, while Security Analysts interpret alerts and investigate threats. Both roles require similar certifications and work environments, but their core responsibilities differ in focus and scope.
What are popular job titles related to Defender Xdr jobs in Florida?
For Defender Xdr jobs in Florida, the most frequently searched job titles are:
What job categories do people searching Defender Xdr jobs in Florida look for?
The top searched job categories for Defender Xdr jobs in Florida are:
What cities in Florida are hiring for Defender Xdr jobs?
Cities in Florida with the most Defender Xdr job openings:
Deloitte rating
8.2
Based on 92 frontline employees who took The Breakroom Quiz
45th of 151 rated financial services
Job description
Our Deloitte Cyber team understands the unique challenges and opportunities businesses face in cybersecurity. Join our team to deliver powerful solutions to help our clients navigate the ever-changing threat landscape. Through powerful solutions and managed services that simplify complexity, we enable our clients to operate with resilience, grow with confidence, and proactively manage to secure success.
Recruiting for this role ends on 12/31/2026.
Work you'll do
As a Senior Consultant, Sentinel on the Deloitte Cyber team, you will be responsible for:
- Architecting, designing, and implementing Microsoft Sentinel, Microsoft Defender for Endpoint, and extended detection and response solutions across Azure, Amazon Web Services, and Google Cloud Platform environments
- Developing Kusto Query Language queries, functions, analytical rules, dashboards, workbooks, and automation playbooks to support monitoring, detection engineering, threat hunting, and incident response
- Supporting migrations from legacy security information and event management platforms to Microsoft Sentinel, including log onboarding, parser development, custom data source integration, log forwarder deployment, and log collection optimization
- Performing end-to-end event analysis, incident detection, escalation management, false positive tuning, and runbook-driven response activities using documented procedures and playbooks
- Implementing and maintaining advanced Microsoft Sentinel capabilities, including threat intelligence integration, user and entity behavior analytics, custom dashboards, workbook development, and third-party or software-as-a-service application connectivity
- Creating technical reports, security visualizations, operating procedures, and lifecycle documentation to support client security, operational, and business requirements
A successful candidate would possess these skills:
- Ability to work independently and collaborate as part of a team
- Effective written and verbal communication skills
- Meticulous attention to detail and quality of work product
- Ability to build and sustain professional relationships
- Ability to lead projects or workstreams
- Ability to manage and prioritize multiple tasks in a fast-paced and dynamic environment
- Strong interpersonal skills and professional demeanor
- Ability to meet deadlines
- Ability to provide clear guidance to others
The team
Our Deloitte Cyber team understands the unique challenges and opportunities businesses face in cybersecurity. Join our team to deliver powerful solutions to help our clients navigate the ever-changing threat landscape. Through powerful solutions and managed services that simplify complexity, we enable our clients to operate with resilience, grow with confidence, and proactively manage to secure success.
Qualifications
Required:
- 4+ years of experience architecting, designing, and implementing Microsoft Sentinel, endpoint detection and response, or extended detection and response solutions in enterprise environments
- 4+ years of experience with security information and event management, detection engineering, log management, or security operations in Azure, Amazon Web Services, or Google Cloud Platform environments
- Experience developing Kusto Query Language queries and functions, analytical rules, dashboards, workbooks, and automation playbooks in Microsoft Sentinel
- Experience migrating from legacy security information and event management platforms to Microsoft Sentinel, including parser development, custom data source integration, and log collection or forwarder deployment
- Experience with scripting or automation tools such as PowerShell, Python, or Terraform for security operations or platform administration
- Ability to travel 50%, on average, based on the work you do and the clients and industries/sectors you serve.
- Limited immigration sponsorship may be available.
Preferred:
- Bachelor's degree in Computer Science, Cyber Security, Information Security, Engineering, or Information Technology
- Experience with threat intelligence integration, user and entity behavior analytics, or threat hunting aligned to MITRE ATT&CK
- Experience implementing Microsoft Defender XDR, Microsoft Defender products, Azure Arc, or Microsoft Sentinel pricing models
- Experience integrating native, third-party, or software-as-a-service applications with Microsoft Sentinel
- Microsoft Sentinel Ninja Training Level 400 completion
- One or more certifications such as Microsoft Certified: Security Operations Analyst Associate (SC-200), Certified Cloud Security Professional, Certificate of Cloud Security Knowledge, Certified Information Systems Security Professional, Cisco Certified Network Professional, or Cisco Certified Network Associate
The wage range for this role takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs. The disclosed range estimate has not been adjusted for the applicable geographic differential associated with the location at which the position may be filled. At Deloitte, it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is $105,400 to $207,800.
You may also be eligible to participate in a discretionary annual incentive program, subject to the rules governing the program, whereby an award, if any, depends on various factors, including, without limitation, individual and organizational performance.
Qualifications:Our Deloitte Cyber team understands the unique challenges and opportunities businesses face in cybersecurity. Join our team to deliver powerful solutions to help our clients navigate the ever-changing threat landscape. Through powerful solutions and managed services that simplify complexity, we enable our clients to operate with resilience, grow with confidence, and proactively manage to secure success.
Recruiting for this role ends on 12/31/2026.
Work you'll do
As a Senior Consultant, Sentinel on the Deloitte Cyber team, you will be responsible for:
- Architecting, designing, and implementing Microsoft Sentinel, Microsoft Defender for Endpoint, and extended detection and response solutions across Azure, Amazon Web Services, and Google Cloud Platform environments
- Developing Kusto Query Language queries, functions, analytical rules, dashboards, workbooks, and automation playbooks to support monitoring, detection engineering, threat hunting, and incident response
- Supporting migrations from legacy security information and event management platforms to Microsoft Sentinel, including log onboarding, parser development, custom data source integration, log forwarder deployment, and log collection optimization
- Performing end-to-end event analysis, incident detection, escalation management, false positive tuning, and runbook-driven response activities using documented procedures and playbooks
- Implementing and maintaining advanced Microsoft Sentinel capabilities, including threat intelligence integration, user and entity behavior analytics, custom dashboards, workbook development, and third-party or software-as-a-service application connectivity
- Creating technical reports, security visualizations, operating procedures, and lifecycle documentation to support client security, operational, and business requirements
A successful candidate would possess these skills:
- Ability to work independently and collaborate as part of a team
- Effective written and verbal communication skills
- Meticulous attention to detail and quality of work product
- Ability to build and sustain professional relationships
- Ability to lead projects or workstreams
- Ability to manage and prioritize multiple tasks in a fast-paced and dynamic environment
- Strong interpersonal skills and professional demeanor
- Ability to meet deadlines
- Ability to provide clear guidance to others
The team
Our Deloitte Cyber team understands the unique challenges and opportunities businesses face in cybersecurity. Join our team to deliver powerful solutions to help our clients navigate the ever-changing threat landscape. Through powerful solutions and managed services that simplify complexity, we enable our clients to operate with resilience, grow with confidence, and proactively manage to secure success.
Qualifications
Required:
- 4+ years of experience architecting, designing, and implementing Microsoft Sentinel, endpoint detection and response, or extended detection and response solutions in enterprise environments
- 4+ years of experience with security information and event management, detection engineering, log management, or security operations in Azure, Amazon Web Services, or Google Cloud Platform environments
- Experience developing Kusto Query Language queries and functions, analytical rules, dashboards, workbooks, and automation playbooks in Microsoft Sentinel
- Experience migrating from legacy security information and event management platforms to Microsoft Sentinel, including parser development, custom data source integration, and log collection or forwarder deployment
- Experience with scripting or automation tools such as PowerShell, Python, or Terraform for security operations or platform administration
- Ability to travel 50%, on average, based on the work you do and the clients and industries/sectors you serve.
- Limited immigration sponsorship may be available.
Preferred:
- Bachelor's degree in Computer Science, Cyber Security, Information Security, Engineering, or Information Technology
- Experience with threat intelligence integration, user and entity behavior analytics, or threat hunting aligned to MITRE ATT&CK
- Experience implementing Microsoft Defender XDR, Microsoft Defender products, Azure Arc, or Microsoft Sentinel pricing models
- Experience integrating native, third-party, or software-as-a-service applications with Microsoft Sentinel
- Microsoft Sentinel Ninja Training Level 400 completion
- One or more certifications such as Microsoft Certified: Security Operations Analyst Associate (SC-200), Certified Cloud Security Professional, Certificate of Cloud Security Knowledge, Certified Information Systems Security Professional, Cisco Certified Network Professional, or Cisco Certified Network Associate
The wage range for this role takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs. The disclosed range estimate has not been adjusted for the applicable geographic differential associated with the location at which the position may be filled. At Deloitte, it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is $105,400 to $207,800.
You may also be eligible to participate in a discretionary annual incentive program, subject to the rules governing the program, whereby an award, if any, depends on various factors, including, without limitation, individual and organizational performance.
Education:NoneEmployment Type:
About Deloitte
Sourced by ZipRecruiter
Industry
Finance and insurance and business management consulting
Company size
10,000+ Employees
Headquarters location
Orlando, FL, US