YOUR MISSION

Design and own enterprise-grade SIEM / EDR / XDR architectures centered on Microsoft Sentinel and the Microsoft Defender security stack
Define detection strategy by translating security objectives into actionable use cases, telemetry requirements, and architectural designs
Engineer advanced detections using KQL, building reusable analytics, baselines, and threat-aligned correlations mapped to MITRE ATT&CK
Integrate and normalize telemetry across cloud, hybrid, and on-prem sources including endpoints, identities, networks, workloads, and custom logs
Automate investigation and response through Sentinel playbooks, analytics rules, and workflows using PowerShell and/or Python
Partner with SOC and IR teams to drive continuous improvement across detection lifecycle, tuning, validation, and KPI-driven effectiveness reviews

YOUR EXPERIENCE & TALENTS

Proven expertise designing and operating Microsoft Sentinel in large-scale enterprise or MSSP/MDR environments
Hands-on experience with EDR/XDR platforms, preferably Microsoft Defender XDR
Strong background in detection engineering, log pipelines, data schemas, parsing, enrichment, and entity correlation
Experience optimizing SIEM architectures for cost, performance, retention, compliance, and auditability
Ability to lead and advise senior stakeholders across Security Architecture, SOC, Cloud, Identity, and Platform teams
Microsoft security certifications strongly preferred, including SC-200, SC-100, or Azure Architect (AZ-305); GIAC / CISSP beneficial

BENEFITS OFFERED BY OUR CLIENT

Work with top-tier talent in a collaborative, high-performing team
Grow through cutting-edge technologies, continuous learning, and certification opportunities
Thrive in a global, diverse culture while contributing to exciting, cross-industry projects
Enjoy 50+ tailored benefits and a flexible hybrid working model
Balance work and life in a culture that supports your personal and professional development

PERFECT MATCH? We look forward to receiving your application!
QUESTIONS? Please contact Tanya at: +49 30 233 291 755
RECOMMENDATIONS? We’ll reward the successful placement of your recommendation with EUR 1000

Security Detection Architect (Microsoft Sentinel & Defender XDR)

Design and scale enterprise SIEM, EDR, and XDR architectures using Microsoft Sentinel and Defender. Build high-fidelity detections, automate response, and bridge security engineering with SOC operatio

Colleagues

Security Detection Architect (Microsoft Sentinel & Defender XDR)

Design and scale enterprise SIEM, EDR, and XDR architectures using Microsoft Sentinel and Defender. Build high-fidelity detections, automate response, and bridge security engineering with SOC operatio

Security Detection Architect (Microsoft Sentinel & Defender XDR)

Design and scale enterprise SIEM, EDR, and XDR architectures using Microsoft Sentinel and Defender. Build high-fidelity detections, automate response, and bridge security engineering with SOC operatio

Colleagues

OPEN POSITIONS

Security Detection Architect (Microsoft Sentinel & Defender XDR)

Design and scale enterprise SIEM, EDR, and XDR architectures using Microsoft Sentinel and Defender. Build high-fidelity detections, automate response, and bridge security engineering with SOC operatio