Cybersecurity Engineering Specialist

About the role

We are seeking an Engineering Senior Specialist to design, engineer, and operate enterprise‑scale XDR and SIEM platforms across Microsoft and Google security ecosystems. The role sits at the intersection of security platform engineering, detection engineering, and operational resilience, aiming to improve threat detection quality, response effectiveness, data fidelity, and platform reliability in a global enterprise environment.

Key responsibilities

• Engineer, operate, and continuously optimize Microsoft Sentinel and Microsoft Defender XDR (Endpoint, Identity, Office, Cloud).
• Design, operate, and maintain Google Chronicle SIEM for high‑volume telemetry ingestion, analytics, and long‑term retention.
• Build scalable ingestion architectures with normalization, enrichment, routing, and retention across hybrid and multi‑cloud environments.
• Support detection tuning to reduce false positives, improve signal‑to‑noise ratio, and align with SOC workflows.
• Partner with application, platform, and infrastructure teams to close logging and visibility gaps and enforce data‑quality standards.
• Implement automation for detection lifecycle management, enrichment, and response orchestration using SOAR and native platform capabilities.

Required profile

• 5+ years of experience in security engineering, detection engineering, or SOC engineering roles.
• Strong hands‑on experience with Microsoft Sentinel and Microsoft Defender XDR.
• Experience with Google Chronicle SIEM or equivalent large‑scale cloud SIEM platforms.
• Proficiency in KQL and authoring structured detection logic.
• Solid understanding of cloud security (Azure and/or GCP), identity, endpoint, and network telemetry.
• Experience operating security platforms in large, complex enterprise environments.

Required skills

• Microsoft Sentinel
• Microsoft Defender XDR
• Google Chronicle SIEM
• KQL
• Azure
• Google Cloud Platform (GCP)
• Cloud security
• Identity Access Management (IAM)