Senior Detection Engineer

Owning the detection coverage across Microsoft security products, the full-time remote Senior Detection Engineer will manage detection capabilities, build and maintain a comprehensive map of Microsoft security signals, and automate investigative workflows to enhance SOC operations. Key responsibilities Build and maintain a living map of Microsoft security signals, tracking changes and ensuring detection efficacy Automate Microsoft-specific investigative workflows to improve SOC analyst efficiency Collaborate with engineering teams on Microsoft integrations, API limits, and schema mapping Required qualifications Deep, current knowledge of the Microsoft security stack, including Defender XDR, Entra ID, and Sentinel Fluency in KQL for writing and optimizing hunting queries across Defender and Sentinel Experience with Graph and Graph Security APIs, including authentication and permission models 5+ years in information technology or security operations, particularly in Microsoft environments Proficiency in Python and experience with custom detections against Microsoft datasets