Senior Security Engineer Microsoft Sentinel / SIEM

We're Hiring: Senior Azure Security Engineer – Microsoft Sentinel / SIEM

Location: Bengaluru

We are looking for a Senior Azure Security Engineer with strong hands-on experience in Microsoft Sentinel, Azure Security, SIEM integrations, telemetry engineering, KQL, and detection engineering.

The role will focus on enterprise-scale SIEM onboarding, log integration design, telemetry pipeline engineering, security architecture validation, and operational troubleshooting.

Experience Required

• 8+ years of overall Security Engineering experience
• 6+ years of hands-on experience with enterprise SIEM platforms
• Strong hands-on experience with Microsoft Sentinel
• Strong Microsoft Azure Security experience
• Advanced KQL and detection engineering experience
• Strong experience in SIEM integration design and log onboarding
• Experience with telemetry and log engineering at enterprise scale
• Experience conducting security architecture and integration reviews
• Experience mentoring junior engineers

Key Responsibilities

• Qualify and assess new SIEM onboarding requirements and integrations
• Review architecture, authentication, security controls, and connectivity requirements
• Design and review log onboarding patterns and telemetry pipelines
• Develop and maintain Data Collection Rules (DCRs), parsers, and transformations
• Support ASIM normalization and security telemetry schema design
• Estimate telemetry volumes and support retention and cost assessments
• Develop and optimize KQL queries and detection use cases
• Troubleshoot log ingestion, connectivity, authentication, and data-quality issues
• Support onboarding of applications, infrastructure, cloud platforms, and security tools into the SIEM
• Develop reusable onboarding standards, engineering patterns, and accelerators
• Collaborate with Security Engineering, Threat Monitoring, Infrastructure, Technology, and platform teams
• Provide technical guidance and mentoring to junior engineers

Required Technical Skills

• Microsoft Azure: Entra ID, Networking, Log Analytics, Azure Monitor, Key Vault, RBAC
• Microsoft Sentinel
• SIEM platforms such as Splunk, QRadar, or Elastic
• Log ingestion technologies including Azure Monitor Agent (AMA), Syslog, Logstash, Fluent Bit, and Beats
• Data Collection Rules (DCRs)
• KQL / Kusto Query Language
• ASIM and SIEM data normalization
• Detection engineering
• Cloud Security Engineering
• Linux and container platforms
• Git and CI/CD practices
• Telemetry and log pipeline engineering

Preferred Profile:

• Strong experience delivering enterprise SIEM onboarding or migration programmes
• Experience designing scalable and cost-efficient telemetry architectures
• Strong understanding of security monitoring and detection engineering
• Ability to translate business and security requirements into technical onboarding patterns
• Strong troubleshooting and stakeholder-management skills
• Experience working across Security Engineering, SOC, Infrastructure, and application teams