Azure Security Architect (100% Remote)

We are looking for an experienced Microsoft Sentinel / Azure Security Engineer to join our Cyber Security team. The role involves designing, implementing, and optimizing SIEM and SOAR solutions using Microsoft Sentinel and Azure Log Analytics, developing advanced threat detection capabilities, automating incident response, and integrating security data from cloud and on-premises environments.

• 10+ years of experience in Cloud Computing and Cloud Security
• At least 5 years of hands-on experience in Azure Security
• 3-4 years of practical experience with Microsoft Sentinel, Azure Log Analytics, and Kusto Query Language (KQL)
• Proven experience implementing and managing SIEM and SOAR solutions
• Strong expertise in Microsoft Sentinel and Azure Log Analytics
• Experience connecting logs from various cloud, on-premises, and third-party sources to Microsoft Sentinel
• Hands-on experience developing analytics rules, playbooks, workbooks, notebooks, threat hunting use cases, and incident response workflows
• Strong knowledge of KQL for data normalization, parsing, and security analytics
• Experience with Azure Logic Apps for security automation
• Experience with scripting and automation using Python or similar languages
• Experience integrating security solutions into DevOps and CI/CD pipelines
• Practical knowledge of Syslog, RSyslog, and Syslog-ng
• Experience integrating on-premises security logs into Microsoft Sentinel

• Design, develop, and optimize SIEM and SOAR use cases using Microsoft Sentinel
• Develop and maintain analytics rules, playbooks, workbooks, notebooks, threat hunting scenarios, and incident response capabilities
• Integrate security logs from Azure, on-premises environments, and third-party solutions into Microsoft Sentinel
• Configure and manage built-in and custom log connectors
• Implement security log collection using Syslog, RSyslog, and Syslog-ng
• Develop advanced Kusto Query Language (KQL) queries for data ingestion, normalization, parsing, and threat detection
• Build and automate incident response workflows using Azure Logic Apps
• Develop Jupyter Notebooks using Python or other scripting languages for security operations
• Integrate security use cases into DevOps and CI/CD pipelines
• Collaborate with security architects and SOC teams to design and implement detection and response capabilities
• Continuously improve monitoring, detection, and automation processes across the security platform

This position requires working 100% remotely from Poland.