We are seeking an experienced Microsoft Sentinel Subject Matter Expert (SME) to design, implement ... The role will focus on SIEM/SOAR engineering, threat detection, incident response, security ...
We are seeking an experienced Microsoft Sentinel Subject Matter Expert (SME) to design, implement ... The role will focus on SIEM/SOAR engineering, threat detection, incident response, security ...
Hands-on experience with Microsoft Sentinel administration, monitoring, and detection engineering. * Experience with KQL, analytics rules, and automation. * PKI Engineering: Demonstrable ...
Hands-on experience with Microsoft Sentinel administration, monitoring, and detection engineering. * Experience with KQL, analytics rules, and automation. * PKI Engineering: Demonstrable ...
Responsibilities : • Management of Sentinel Platform monitoring and platform support of Microsoft Sentinel SIEM Administer • SIEM Environment Participate in security incident investigation on ...
Responsibilities : • Management of Sentinel Platform monitoring and platform support of Microsoft Sentinel SIEM Administer • SIEM Environment Participate in security incident investigation on ...
Azure Sentinel Engineer
Annapolis, MD · On-site
$54.50 - $67.50/hr
Azure Sentinel Engineer Annapolis, MD 12 months Mandatory Qualifications: Bachelor's degree in ... Microsoft Flow and Power BI Advanced incident investigation and response skill set Advanced log ...
Azure Sentinel Engineer
Annapolis, MD · On-site
$54.50 - $67.50/hr
Azure Sentinel Engineer Annapolis, MD 12 months Mandatory Qualifications: Bachelor's degree in ... Microsoft Flow and Power BI Advanced incident investigation and response skill set Advanced log ...
Be Seen First
Microsoft Sentinel Architect - Federal Contract (Remote)
San Diego, CA · Remote
$100 - $140/hr
Azure Security Engineer Associate * Microsoft Certified: Azure Solutions Architect Expert * CISSP ... Microsoft Sentinel implementation experience * Current professional certifications * Availability
Quick apply
Be Seen First
Microsoft Sentinel Architect - Federal Contract (Remote)
San Diego, CA · Remote
$100 - $140/hr
Azure Security Engineer Associate * Microsoft Certified: Azure Solutions Architect Expert * CISSP ... Microsoft Sentinel implementation experience * Current professional certifications * Availability
Be Seen First
Microsoft Sentinel Architect - Federal Contract (Remote)
San Diego, CA · Remote
$100 - $140/hr
Azure Security Engineer Associate * Microsoft Certified: Azure Solutions Architect Expert * CISSP ... Microsoft Sentinel implementation experience * Current professional certifications * Availability
Quick apply
Be Seen First
Microsoft Sentinel Architect - Federal Contract (Remote)
San Diego, CA · Remote
$100 - $140/hr
Azure Security Engineer Associate * Microsoft Certified: Azure Solutions Architect Expert * CISSP ... Microsoft Sentinel implementation experience * Current professional certifications * Availability
Be Seen First
Microsoft Sentinel Architect - Federal Contract (Remote)
San Diego, CA · Remote
$100 - $140/hr
Azure Security Engineer Associate * Microsoft Certified: Azure Solutions Architect Expert * CISSP ... Microsoft Sentinel implementation experience * Current professional certifications * Availability
Quick apply
Be Seen First
Microsoft Sentinel Architect - Federal Contract (Remote)
San Diego, CA · Remote
$100 - $140/hr
Azure Security Engineer Associate * Microsoft Certified: Azure Solutions Architect Expert * CISSP ... Microsoft Sentinel implementation experience * Current professional certifications * Availability
MS Sentinel Engineer/SME
New York, NY · Remote
Expert-level proficiency in Microsoft Sentinel * Operating in a FedRAMP environment * Design and implement - Analytics rules and detections * Log parsing and normalization EDUCATIONAL/SKILL ...
Quick apply
MS Sentinel Engineer/SME
New York, NY · Remote
Expert-level proficiency in Microsoft Sentinel * Operating in a FedRAMP environment * Design and implement - Analytics rules and detections * Log parsing and normalization EDUCATIONAL/SKILL ...
Microsoft SME
Washington, DC · On-site
Support SIEM integration, security logging, and Microsoft Sentinel operations * Troubleshoot complex endpoint and systems engineering issues * Develop technical standards, engineering procedures, and ...
Quick apply
Microsoft SME
Washington, DC · On-site
Support SIEM integration, security logging, and Microsoft Sentinel operations * Troubleshoot complex endpoint and systems engineering issues * Develop technical standards, engineering procedures, and ...
Microsoft SME
Washington, DC · On-site
Support SIEM integration, security logging, and Microsoft Sentinel operations * Troubleshoot complex endpoint and systems engineering issues * Develop technical standards, engineering procedures, and ...
Microsoft SME
Washington, DC · On-site
Support SIEM integration, security logging, and Microsoft Sentinel operations * Troubleshoot complex endpoint and systems engineering issues * Develop technical standards, engineering procedures, and ...
Microsoft SME
Washington, DC · On-site
Support SIEM integration, security logging, and Microsoft Sentinel operations * Troubleshoot complex endpoint and systems engineering issues * Develop technical standards, engineering procedures, and ...
Microsoft SME
Washington, DC · On-site
Support SIEM integration, security logging, and Microsoft Sentinel operations * Troubleshoot complex endpoint and systems engineering issues * Develop technical standards, engineering procedures, and ...
... engineering, threat hunting, and incident response * Supporting migrations from legacy security information and event management platforms to Microsoft Sentinel, including log onboarding, parser ...
... engineering, threat hunting, and incident response * Supporting migrations from legacy security information and event management platforms to Microsoft Sentinel, including log onboarding, parser ...
... engineering, threat hunting, and incident response * Supporting migrations from legacy security information and event management platforms to Microsoft Sentinel, including log onboarding, parser ...
... engineering, threat hunting, and incident response * Supporting migrations from legacy security information and event management platforms to Microsoft Sentinel, including log onboarding, parser ...
... engineering, threat hunting, and incident response * Supporting migrations from legacy security information and event management platforms to Microsoft Sentinel, including log onboarding, parser ...
... engineering, threat hunting, and incident response * Supporting migrations from legacy security information and event management platforms to Microsoft Sentinel, including log onboarding, parser ...
SIEM Engineer
Wilmington, DE · Remote
$75 - $80/hr
SIEM Engineer, REMOTE Start date is ASAP for this 3 to 6 month contract position. Job Title: SIEM ... Job Summary Design, deploy, and scale the Microsoft Sentinel and Log Analytics Workspace ...
Quick apply
SIEM Engineer
Wilmington, DE · Remote
$75 - $80/hr
SIEM Engineer, REMOTE Start date is ASAP for this 3 to 6 month contract position. Job Title: SIEM ... Job Summary Design, deploy, and scale the Microsoft Sentinel and Log Analytics Workspace ...
... engineering, threat hunting, and incident response * Supporting migrations from legacy security information and event management platforms to Microsoft Sentinel, including log onboarding, parser ...
... engineering, threat hunting, and incident response * Supporting migrations from legacy security information and event management platforms to Microsoft Sentinel, including log onboarding, parser ...
... engineering, threat hunting, and incident response * Supporting migrations from legacy security information and event management platforms to Microsoft Sentinel, including log onboarding, parser ...
... engineering, threat hunting, and incident response * Supporting migrations from legacy security information and event management platforms to Microsoft Sentinel, including log onboarding, parser ...
... engineering, threat hunting, and incident response * Supporting migrations from legacy security information and event management platforms to Microsoft Sentinel, including log onboarding, parser ...
... engineering, threat hunting, and incident response * Supporting migrations from legacy security information and event management platforms to Microsoft Sentinel, including log onboarding, parser ...
... engineering, threat hunting, and incident response * Supporting migrations from legacy security information and event management platforms to Microsoft Sentinel, including log onboarding, parser ...
... engineering, threat hunting, and incident response * Supporting migrations from legacy security information and event management platforms to Microsoft Sentinel, including log onboarding, parser ...
... engineering, threat hunting, and incident response * Supporting migrations from legacy security information and event management platforms to Microsoft Sentinel, including log onboarding, parser ...
... engineering, threat hunting, and incident response * Supporting migrations from legacy security information and event management platforms to Microsoft Sentinel, including log onboarding, parser ...
Microsoft Sentinel Engineer information
See salary details
$38K - $52K
5% of jobs
$52K - $65.9K
7% of jobs
$65.9K - $79.9K
9% of jobs
$82.8K is the 25th percentile. Wages below this are outliers.
$79.9K - $93.8K
14% of jobs
The median wage is $106.4K / yr.
$93.8K - $107.8K
16% of jobs
$107.8K - $121.7K
13% of jobs
$121.7K - $135.7K
6% of jobs
$143.1K is the 75th percentile. Wages above this are outliers.
$135.7K - $149.6K
8% of jobs
$149.6K - $163.6K
8% of jobs
$163.6K - $177.5K
7% of jobs
$177.5K - $191.5K
5% of jobs
$38K
$115.9K
$191.5K
How much do microsoft sentinel engineer jobs pay per year?
As of Sep 11, 2026, the average yearly pay for microsoft sentinel engineer in the United States is $115,864.00, according to ZipRecruiter salary data. Most workers in this role earn between $83,000.00 and $151,500.00 per year, depending on experience, location, and employer.
What is a Microsoft Sentinel Engineer?
A Microsoft Sentinel Engineer is a cybersecurity professional responsible for implementing, configuring, and managing Microsoft Sentinel, which is a cloud-native Security Information and Event Management (SIEM) solution. These engineers design and deploy security monitoring, automate threat detection, and respond to incidents using Sentinel's tools and analytics. They also integrate data sources, create custom detection rules, and ensure the organization's cloud and on-premises infrastructure is adequately monitored against security threats. Their work helps organizations quickly identify, investigate, and mitigate cyber threats.
What are the key skills and qualifications needed to thrive as a Microsoft Sentinel Engineer?
To thrive as a Microsoft Sentinel Engineer, you need strong skills in cybersecurity, incident response, and cloud security, often supported by experience with SIEM solutions and relevant certifications like Microsoft Certified: Security Operations Analyst Associate. Familiarity with Microsoft Sentinel, Kusto Query Language (KQL), Azure security tools, and automation platforms such as Logic Apps is essential. Critical thinking, problem-solving, and effective communication are key soft skills for analyzing threats and collaborating across teams. These skills and qualities are important for ensuring robust threat detection, efficient incident response, and maintaining a resilient security posture in cloud environments.
What are some common challenges Microsoft Sentinel Engineers face when integrating Sentinel with diverse security tools?
Microsoft Sentinel Engineers often encounter challenges when integrating Sentinel with a variety of security tools and data sources due to differences in log formats, API compatibility, and data volume. Ensuring seamless data ingestion while maintaining performance and security can require advanced configuration and troubleshooting. Collaboration with network, infrastructure, and application teams is crucial to understand source systems and align on integration requirements. Continuous learning is important, as new connectors and features are frequently released by Microsoft to improve integration processes.
What is the difference between Microsoft Sentinel Engineer vs Security Analyst?
| Aspect | Microsoft Sentinel Engineer | Security Analyst |
|---|---|---|
| Certifications | Microsoft Certified: Security, Compliance, and Identity Fundamentals; Microsoft Certified: Security Operations Analyst Associate | CompTIA Security+, GIAC Security Essentials (GSEC), CISSP (preferred) |
| Work Environment | Focus on configuring, deploying, and managing Microsoft Sentinel for threat detection and response | Monitor security alerts, analyze threats, and implement security measures across systems |
| Industry Usage | Primarily in organizations using Microsoft security tools and cloud services | Across various industries, often in security operations centers (SOCs) |
The Microsoft Sentinel Engineer specializes in deploying and managing Microsoft Sentinel to enhance security monitoring, while the Security Analyst focuses on analyzing security data and responding to threats across multiple platforms. Both roles require security certifications and work in security-focused environments, but their core responsibilities differ in scope and technical focus.
What are popular job titles related to Microsoft Sentinel Engineer jobs?
For Microsoft Sentinel Engineer jobs, the most frequently searched job titles are:
Microsoft Sentinel Subject Matter Expert
Cobb, GA • On-site
2T Consulting
• IT Services • 51 - 200 employees51 - 200 employees
Full-time
This job post has expired 2 days ago. Applications are no longer accepted.
Job description
We are seeking an experienced Microsoft Sentinel Subject Matter Expert (SME) to design, implement, optimize, and manage Microsoft Sentinel and Azure security solutions. The role will focus on SIEM/SOAR engineering, threat detection, incident response, security automation, cloud security, and compliance across enterprise Azure environments.
Roles and Responsibilities- Design, implement, configure, and manage Microsoft Sentinel SIEM/SOAR solutions.
- Integrate security data sources into Azure Log Analytics, including Syslog, CEF, APIs, and threat intelligence feeds.
- Develop, optimize, and maintain KQL queries, analytics rules, detection rules, alerts, workbooks, and dashboards.
- Develop automated security response workflows using Azure Logic Apps and Microsoft Copilot for Security.
- Perform threat hunting, incident investigation, detection engineering, and response activities in collaboration with SOC teams.
- Implement and manage Azure security controls aligned with Zero Trust principles.
- Configure and secure enterprise Azure environments, including identity, access, monitoring, and security services.
- Assess vulnerabilities, analyze attacker TTPs, and support remediation and security improvement initiatives.
- Integrate and manage Microsoft Defender XDR, including Defender for Endpoint, Office 365, Identity, and Cloud Apps.
- Support cloud security governance, compliance, risk assessments, and audit activities.
- Provide technical guidance on security architecture, SIEM/SOAR strategy, detection engineering, and cloud security initiatives.
- Develop security standards, operational procedures, and best practices for Sentinel and Azure security services.
- Collaborate with Security Operations, Cloud Engineering, Identity, Application Security, and Governance teams.
- Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or a related field.
- 5+ years of cybersecurity experience, including strong hands-on experience with Microsoft Sentinel engineering and administration.
- Strong expertise in:
- Microsoft Sentinel
- Azure Log Analytics
- Kusto Query Language (KQL)
- Azure Logic Apps
- Microsoft Defender XDR
- Azure Security and Identity Services
- Microsoft Entra ID
- Privileged Identity Management (PIM)
- Conditional Access
- Security monitoring and incident response
- CI/CD security and application security scanning
- Strong understanding of SIEM/SOAR, threat detection, threat hunting, incident response, and security automation.
- Experience implementing security controls in enterprise Azure environments.
- Strong knowledge of Zero Trust architecture and cloud security best practices.
- Experience with Azure Government / Government Cloud environments.
- Experience with FISMA, FedRAMP, and NIST security and compliance frameworks.
- Relevant certifications such as CISSP, CCSP, Microsoft Certified: Azure Security Engineer Associate, or Microsoft Certified: Cybersecurity Architect Expert.
- Experience working with security auditors, compliance teams, and executive stakeholders.
About 2T Consulting
Sourced by ZipRecruiter
Industry
It services
Company size
51 - 200 Employees
Headquarters location
Edison, NJ, US