Microsoft Security Engineer

h3About Us /h3 pIntegrity360 is a leading independent cybersecurity and PCI specialist operating across Europe, Africa, the Caribbean, and North America. The company has office locations in Ireland, the UK, Bulgaria, Italy, Sweden, Spain, Lithuania, Ukraine, Africa, the Caribbean, and Canada, supported by seven Security Operations Centres (SOCs) located in Dublin, Sofia, Madrid, Stockholm, Rome, Johannesburg and Cape Town. /p pWith over 780 employees, including more than 585 dedicated cybersecurity professionals, Integrity360 delivers a full suite of professional, support, and managed security services. These span the complete cyber risk lifecycle, from identification and prevention to detection, response, and recovery. Integrity360 supports over 3000 mid-market and enterprise organisations across sectors including financial services, insurance, government, healthcare, retail, telecommunications, and utilities. /p pAt Integrity360, people come first. We invest heavily in learning, development and progression, fostering a dynamic culture where innovation, collaboration and continuous growth are at the heart of what we do. If you're ready to take your cyber security career to the next level, we’d love to hear from you. /p h3Job Role / Responsibilities /h3 pAs a Microsoft Security Engineer, you will be responsible for onboarding clients to our managed security service, with Microsoft Sentinel at the centre of the solution. You will configure and integrate Sentinel environments, onboard and validate log sources, and prepare each deployment for effective monitoring and operational handover to the Security Operations Centre. /p pYour primary focus will be the technical delivery of new Microsoft Sentinel onboardings. This includes workspace and connector configuration, data collection design, log-source integration, ingestion filtering, validation, detection tuning and the production of high-level design and implementation documentation. You will work closely with clients, architects and SOC teams to ensure each deployment is supportable, secure and aligned with the contracted service scope. /p pThe role also requires hands‑on experience, or a clear ability to develop quickly, in onboarding Microsoft Defender XDR workloads such as Defender for Endpoint, Defender for Identity, Defender for Office 365 and Defender for Cloud Apps. You will help establish the integrations, policies and operational workflows required to provide joined‑up detection and response across the Microsoft security ecosystem. /p pThis is a client‑facing engineering role within Professional Services, reporting to the Head of Cloud Security Microsoft Security Services. You will manage assigned onboarding activities from discovery and design through implementation, testing, documentation and handover. You will be supported by an experienced team and have access to training and certification opportunities across Microsoft security technologies. /p h3Key Responsibilities /h3 ulliDeliver end‑to‑end onboarding of client Microsoft Sentinel environments into the MSSP service. /li /ul ulliConfigure Sentinel workspaces, content solutions, data connectors, analytics rules, automation rules, watchlists, workbooks and related components in accordance with approved designs and service standards. /li /ul ulliRun technical discovery sessions to identify log sources, connectivity requirements, data volumes, retention needs, dependencies and onboarding priorities. /li /ul ulliOnboard Microsoft, third‑party, cloud, network, identity and application log sources using supported collection methods, including Azure Monitor Agent, Data Collection Rules, APIs, syslog, CEF and custom connectors where appropriate. /li /ul ulliDesign and implement data filtering and transformation to improve signal quality, control ingestion costs and ensure the service receives the telemetry required for monitoring and detection. /li /ul ulliValidate data ingestion, parsing, field mapping, timestamps, health and coverage, and troubleshoot issues across source systems, collectors, networks and Azure services. /li /ul ulliTune analytics rules, alert logic and incident generation in collaboration with SOC and detection engineering teams to reduce unnecessary noise while maintaining appropriate coverage. /li /ul ulliOnboard and integrate Microsoft Defender XDR workloads, including Defender for Endpoint, Defender for Identity, Defender for Office 365 and Defender for Cloud Apps. /li /ul ulliProduce accurate high‑level designs, implementation plans, configuration records, test evidence, operational runbooks and handover documentation. /li /ul ulliCoordinate with clients, project managers, architects, SOC analysts and service teams to manage dependencies, risks, actions and readiness for service transition. /li /ul ulliApply repeatable engineering standards, peer review and change control, and contribute improvements to onboarding templates, technical patterns and internal procedures. /li /ul ul