Security Engineer II

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Security Engineer II based in the United States. Join a cybersecurity engineering team dedicated to helping organizations strengthen their defenses against increasingly sophisticated digital threats. In this fully remote role, you will lead the implementation and optimization of Microsoft security solutions across diverse enterprise environments. You will work hands-on with Microsoft Sentinel, Defender, and Azure technologies to build effective detection, automation, and incident response capabilities. Partnering directly with customers and internal technical teams, you will translate security requirements into scalable solutions that improve threat visibility and operational resilience. You will also contribute to the evolution of managed detection and response services through research, innovation, and continuous improvement. This opportunity is ideal for an experienced security professional who enjoys solving complex technical challenges and delivering measurable cybersecurity impact.

Lead security solution deployments: Design, architect, deploy, and optimize Microsoft Sentinel and Microsoft Defender solutions remotely, ensuring effective implementation and alignment with customer security requirements. Develop detection and automation capabilities: Create and enhance security detection rules, automated workflows, and reporting use cases tailored to customer environments and threat monitoring needs. Build security reporting and dashboards: Develop and support operational and executive-level dashboards and reports that provide meaningful insights into security posture, threats, and performance. Implement XDR integrations: Lead integrations across Microsoft and Azure security technologies, applying Microsoft Extended Detection and Response (XDR) principles and Zero Trust Architecture to strengthen protection across enterprise environments. Drive technical project delivery: Serve as the primary technical delivery resource within project teams, coordinating implementation activities and managing projects of varying complexity. Improve security operations: Support customer environments on an ongoing basis, helping enhance managed detection and response processes, maintain security capabilities, and improve operational maturity. Contribute to research and development: Explore emerging technologies, identify opportunities to improve engineering workflows, and support the development of new features, tools, and security capabilities. Collaborate with stakeholders: Work closely with customers and internal teams to understand technical requirements, communicate recommendations, resolve implementation challenges, and deliver effective security outcomes. Requirements Professional experience: At least five years of technical experience with Microsoft Cloud Security technologies or equivalent SIEM and XDR solutions, including hands-on engineering experience in production environments. Microsoft Sentinel expertise: Practical experience deploying, configuring, managing, or optimizing Microsoft Sentinel in enterprise or customer environments. Microsoft Defender experience: Hands-on experience deploying or managing Microsoft Defender security products, such as Defender for Endpoint, Defender for Identity, Defender for Cloud Apps, Defender for Office 365, or Defender for Cloud. Azure Cloud proficiency: Strong knowledge of Azure cloud technologies and their application to cybersecurity engineering and enterprise security operations. Querying and scripting skills: Experience with query languages or scripting tools such as Kusto Query Language (KQL), SPL, SQL, or PowerShell. Cybersecurity fundamentals: Solid understanding of enterprise IT systems, security monitoring, threat detection, and the relationship between enterprise infrastructure and cybersecurity risks. Security architecture knowledge: Familiarity with Microsoft XDR concepts, Zero Trust Architecture, and the integration of security technologies across cloud and enterprise environments. Communication and collaboration: Excellent written and verbal communication skills, with the ability to explain technical concepts clearly and work effectively in a dynamic, fast-paced team environment. Education and certifications: A bachelor's degree in a relevant field or equivalent professional experience and certifications. Microsoft certifications such as SC-200 or AZ-500 are advantageous. Preferred qualifications: Advanced proficiency in KQL, including the development of Microsoft Sentinel analytics rules and Defender custom detection rules. Experience with Azure Logic Apps, Azure Functions, and other cloud-based automation services. Previous experience in customer-facing technical consulting, implementation, or security engineering roles. Knowledge of incident investigation, threat analysis, and incident response procedures. Programming or scripting proficiency in Python, PowerShell, or C#/.NET. Familiarity with Linux configuration, administration, and troubleshooting. Experience working with non-Microsoft SIEM or endpoint detection and response (EDR) platforms. Additional eligibility requirements: Must be a U.S. citizen and authorized to work in the United States. Must be comfortable delivering remote technical implementations and collaborating with customers across different environments. Benefits Competitive compensation: A competitive compensation package aligned with experience, technical expertise, and role responsibilities. A specific salary range was not provided in the original listing. Comprehensive benefits: Access to a benefits package designed to support employee health, financial security, and overall well-being. Remote work flexibility: Fully remote work arrangement within the United States. Professional development: Opportunities to deepen expertise in Microsoft Sentinel, Defender, Azure, cloud security, and advanced threat detection technologies. Technical ownership: Hands-on responsibility for security implementations that directly influence customer protection, threat detection, and incident response capabilities. Career growth: Exposure to complex enterprise security environments, cross-functional engineering projects, and research and development initiatives. Collaborative environment: Work alongside cybersecurity specialists and technical professionals focused on protecting organizations from evolving digital threats. Innovation and impact: Opportunities to contribute to new security features, improve deployment processes, and strengthen managed detection and response services.