Job Description
We''re looking for a hands-on Microsoft Sentinel engineer to get security data flowing reliably into Sentinel on a large Microsoft cloud security modernisation programme.You''ll connect data sources, configure Azure Monitor Agent and Data Collection Rules, and fix ingestion problems across several Azure environments. The aim is security telemetry that is complete, trustworthy and easy to support once you hand it over.This is an engineering role, not a SOC analyst or Microsoft 365 admin role. We need someone who has built and troubleshot Sentinel ingestion themselves, ideally in multi-tenant or MSSP-style environments.What you''ll be doingConfiguring and troubleshooting Microsoft Sentinel data connectorsSetting up Azure Monitor Agent (AMA) and Data Collection Rules (DCRs)Building and fixing security log-routing and ingestion pipelinesWriting and adapting KQL queries to validate ingestion and diagnose problemsMaking parsing and normalisation changes where neededTesting data completeness, quality and ingestion latencyFinding and fixing failed, incomplete or unreliable data feedsMonitoring connector health and improving reliabilityOnboarding and stabilising security data across multiple Azure environmentsWriting configuration, testing and operational support documentationBy the end of the engagement you''ll have delivered working connectors, validated data flows with test evidence, a connector health baseline, and documentation the support team can run with.What you''ll ..... full job details .....