ZipRecruiter

Log In

1

Sentinel Siem Jobs in Ohio (NOW HIRING)

EXOS

SIEM Engineer

Orient, OH · On-site

The SIEM Engineer will support and manage Microsoft Sentinel and the broader SIEM development stack, ensuring reliable log ingestion, visibility, monitoring, and threat detection capabilities. This ...

SVA System Vertrieb Alexander GmbH

$85.48 - $125.37/hr

Mehrjährige Erfahrung im Bereich Security Operations oder SIEM/SOAR * Fundierte Kenntnisse in Microsoft Sentinel und idealerweise Microsoft Defender XDR * Erfahrung in der Integration von ...

New

TQL

Sr Security Operations Center Analyst

Cincinnati, OH

$92K - $120K/yr

Develop, tune, and maintain SIEM detection rules, security monitoring content, and incident ... Experience with Microsoft Sentinel, SOAR platforms, PowerShell or Python scripting, and security ...

Exostar

Information Security Engineer

Cincinnati, OH · On-site

IDS, Firewalls, Splunk, Sentinel, Defender, EDR/NGAV, SIEM, vulnerability scanners, legacy and next-generation antivirus, email filtering, DLP, software whitelisting) * Scripting and query language ...

SVA System Vertrieb Alexander GmbH

$85.48 - $125.37/hr

... und SIEM * Enge Zusammenarbeit mit anderen Bereichen innerhalb der SVA sowie mit Vertrieb und ... angrenzenden Themenfeldern wie Azure Sentinel, Microsoft Purview oder Identitäts‑ ...

New

United Airlines

Senior Cloud Engineer

Cincinnati, OH · On-site +1

$70K - $144K/yr

Implement FSLogix profile management, MSIX app attach, and integration with Defender and Sentinel ... Experience integrating third-party SIEM, EDR, or MDM platforms with Microsoft solutions * Hands-on ...

United Airlines

Senior Cloud Engineer

Westerville, OH · On-site +1

$70K - $144K/yr

Implement FSLogix profile management, MSIX app attach, and integration with Defender and Sentinel ... Experience integrating third-party SIEM, EDR, or MDM platforms with Microsoft solutions * Hands-on ...

All JobsSentinel Siem JobsSentinel Siem Jobs in Ohio

Sentinel Siem information

What is a Sentinel SIEM?

Sentinel SIEM refers to Microsoft Sentinel, a cloud-native security information and event management (SIEM) solution. It helps organizations detect, investigate, and respond to security threats across their entire enterprise by collecting and analyzing data from various sources. Sentinel SIEM provides advanced threat detection, automated response, and comprehensive visibility into security events, making it easier for security teams to protect their environments. Its integration with Microsoft Azure and other platforms enables scalable and intelligent security operations.

What are some common challenges faced by professionals working with Microsoft Sentinel SIEM, and how can they be addressed?

Professionals working with Microsoft Sentinel SIEM often encounter challenges such as keeping up with evolving security threats, managing a high volume of alerts, and customizing detection rules to fit their organization's needs. Addressing these issues typically involves ongoing tuning of analytic rules, leveraging automation features like playbooks to reduce manual workload, and regularly collaborating with IT and security teams to ensure that the SIEM is aligned with current business risks. Continuous training and staying updated with Microsoft's documentation and community forums can also help professionals effectively manage and optimize Sentinel deployments.

What are the key skills and qualifications needed to thrive as a Sentinel SIEM specialist?

To thrive as a Sentinel SIEM Specialist, you need a solid understanding of cybersecurity principles, threat analysis, and experience with security incident and event management, often supported by a degree in information security or related certifications like Microsoft Certified: Security Operations Analyst Associate. Proficiency with Microsoft Sentinel, Kusto Query Language (KQL), and familiarity with security orchestration and automation tools are typically required. Strong analytical thinking, attention to detail, and effective communication are essential soft skills for interpreting data and coordinating responses. These skills are crucial for quickly detecting, investigating, and mitigating security threats to protect organizational assets.

What is the difference between Sentinel Siem vs Splunk Security Analyst?

AspectSentinel SiemSplunk Security Analyst
CertificationsMicrosoft Certified: Security, Compliance, and Identity Fundamentals, Azure Security EngineerSplunk Certified User, Splunk Core Certified Power User
Work EnvironmentCloud-based SIEM platform, integrated with Azure servicesOn-premises or cloud, data analysis and security monitoring
Industry UsagePrimarily used in organizations leveraging Microsoft Azure and cloud securityUsed across various industries for security data analysis and monitoring

Sentinel Siem focuses on cloud-native security monitoring within Microsoft Azure environments, while Splunk Security Analyst specializes in analyzing security data across diverse platforms. Both roles require knowledge of security principles and data analysis, but Sentinel Siem emphasizes Azure integration, whereas Splunk offers broader data handling capabilities.

What are popular job titles related to Sentinel Siem jobs in Ohio? For Sentinel Siem jobs in Ohio, the most frequently searched job titles are:
What job categories do people searching Sentinel Siem jobs in Ohio look for? The top searched job categories for Sentinel Siem jobs in Ohio are:
What cities in Ohio are hiring for Sentinel Siem jobs? Cities in Ohio with the most Sentinel Siem job openings:
Sentinel Siem jobs near you

SIEM Engineer

EXOS

Orient, OH • On-site

Contractor

Posted 4 days ago

Job description

Position Overview:

We are seeking a highly skilled and experienced SIEM Engineer with expertise in Microsoft Sentinel, Cribl, and infrastructure performance monitoring. This role is responsible for the design, implementation, administration, and continuous improvement of the organization's Security Information and Event Management, also known as SIEM, ecosystem.

The SIEM Engineer will support and manage Microsoft Sentinel and the broader SIEM development stack, ensuring reliable log ingestion, visibility, monitoring, and threat detection capabilities. This individual will proactively manage data sources, onboard new log sources, develop security use cases, and enhance detection and response capabilities.

Working closely with Security Operations, Infrastructure, and Security Leadership, the SIEM Engineer will continuously assess the evolving threat landscape and adapt security monitoring capabilities to help protect the organization from emerging risks.

The ideal candidate possesses strong technical expertise across multiple cybersecurity domains, including governance and compliance, cloud security architecture, and modern cloud platforms such as software as a service, infrastructure as a service, and platform as a service.

Responsibilities:

  1. Design, implement, administer, and maintain the Microsoft Sentinel platform.
  2. Design, implement, and manage log ingestion pipelines utilizing Cribl.
  3. Develop, optimize, and maintain SIEM content, including analytics rules, alerts, workbooks, and dashboards.
  4. Monitor the health, availability, capacity, and performance of SIEM infrastructure and supporting systems.
  5. Manage platform upgrades, patches, and ongoing maintenance activities.
  6. Identify, evaluate, and onboard new log and telemetry sources to improve security visibility.
  7. Develop and maintain data normalization, parsing, filtering, and enrichment processes.
  8. Support security event monitoring, correlation, and threat detection efforts.
  9. Collaborate with Security Operations Center, also known as SOC, personnel to improve detection coverage and response capabilities.
  10. Assist in developing new searches, use cases, dashboards, and reporting capabilities.
  11. Partner with Security, Infrastructure, Cloud, and IT teams to implement security best practices.
  12. Support incident investigations through log analysis, event correlation, and forensic review.
  13. Assess emerging threats and recommend improvements to monitoring and detection strategies.
  14. Provide guidance, training, and support to internal teams on Microsoft Sentinel, Cribl, and SIEM best practices.

Qualifications: 
  1. Bachelor's degree in Information Technology, Computer Science, Telecommunications, Engineering, or a related field, or equivalent work experience.
  2. Minimum of 7 years of relevant cybersecurity, infrastructure, or SIEM engineering experience.
  3. Strong experience with Microsoft Sentinel.
  4. Strong experience with Cribl.
  5. Strong experience with log ingestion and pipeline management.
  6. Strong experience with security monitoring and alerting.
  7. Experience with security event correlation and analysis.
  8. Experience supporting incident response activities.
  9. Experience with threat detection engineering.
  10. Experience supporting digital forensics and investigations.
  11. Strong understanding of network architecture and protocols.
  12. Strong understanding of security controls and technologies.
  13. Strong understanding of firewalls, intrusion detection systems, intrusion prevention systems, and endpoint security solutions.
  14. Strong understanding of cloud security concepts across software as a service, infrastructure as a service, and platform as a service environments.
  15. Ability to manage multiple initiatives and priorities in an active work environment.
  16. Excellent written, verbal, and interpersonal communication skills.
Preferred Qualifications: 
        1. Experience developing and maintaining Microsoft Sentinel Playbooks using Logic Apps.
        2. Experience building advanced Kusto Query Language queries and analytics rules.
        3. Knowledge of log parsing, transformation, and enrichment techniques using regular expressions.
        4. Experience with security frameworks and compliance standards.
        5. Microsoft Certified: Security Operations Analyst Associate, also known as SC 200.
        6. Microsoft Certified: Cybersecurity Architect Expert, also known as SC 100.
        7. Certified Information Systems Security Professional, also known as CISSP.
        8. Global Information Assurance Certification, also known as GIAC.
        9. Azure Security certifications.
Education:Employment Type: CONTRACTOR

Apply