Tasks Assess, design and optimize SIEM architectures, onboarding new customers and taking over existing environmentsLead greenfield and brownfield Microsoft Sentinel deployments for enterprise customersExecute SIEM migrations from platforms such as Splunk, QRadar, SentinelOne, ArcSight or other SIEM technologies to Microsoft SentinelDesign and implement log onboarding strategies, data connectors, normalization and ingestion optimizationDevelop and tune Analytics Rules, KQL detections, Workbooks and Hunting QueriesCreate and implement SOAR automations and Azure Logic App playbooksConduct customer workshops, architecture reviews and best-practice consulting sessionsDevelop transition plans, operational handover documentation, playbooks and runbooksSupport pre-sales activities, effort estimations and technical solution proposals Qualifications 4+ years experience with SIEM technologies and cybersecurity engineeringProven hands-on implementation experience with Microsoft SentinelExperience designing and deploying Microsoft security solutions: Microsoft Defender XDR, Defender for Endpoint, Defender for Identity, Defender for Cloud, Microsoft Entra IDStrong KQL (Kusto Query Language) skillsExperience integrating log sources: Firewalls (Check Point, Palo Alto, Fortinet), Microsoft 365, Active Directory, Azure, Linux/Windows servers, Network and security appliancesExperience with automation and orchestration using Logic Apps / SOAR technologiesExperience performing SIEM transitions, migrations or customer onboarding projectsGood understanding of SOC processes, detection engineering, and incident response workflows Things to know before departure:Start: by arrangement - always on the 1st and 15th of the monthWorking hours: full time (40h); 27 vacation daysEmployment contract : UnlimitedLine of work: ConsultingLanguage skills: Fluency in written and spoken English; German is an advantage Flexibility & willingness to travelOther: a valid work permit Show more Show less