Security Engineer

🔥 12 hours ago

🇱🇹 Lithuania – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 10%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Integrity360

WebsiteLinkedInAll Job Openings

201 - 500 employees

💼 Consulting

🏥 Healthcare

🛡️ Insurance

Consulting • Healthcare • Insurance

Integrity360 is a leading independent cyber security and PCI specialist in Europe, providing dedicated experts for managed services, consulting services, penetration testing, and incident response. The company focuses on a security-first philosophy, helping organizations prepare for cyber threats by enhancing their resilience across networks, infrastructure, and information. Integrity360 operates five Security Operations Centres across Europe and South Africa, delivering 24/7 protection against cyber attacks. Services offered include managed detection and response, incident response, cyber testing, compliance maintenance, and more, ensuring security breaches are quickly identified and resolved. Recognized by Gartner, Integrity360 continues to expand globally and invest in its cutting-edge security operations facilities.

📋 Description

• Deliver end-to-end onboarding of client Microsoft Sentinel environments into the MSSP service • Configure Sentinel workspaces, content solutions, data connectors, analytics rules, automation rules, watchlists and workbooks • Run technical discovery sessions covering log sources, connectivity, data volumes, retention, dependencies and priorities • Onboard Microsoft, third-party, cloud, network, identity and application log sources using Azure Monitor Agent, Data Collection Rules, APIs, syslog, CEF and custom connectors • Design and implement data filtering and transformation to improve signal quality and control ingestion costs • Validate ingestion, parsing, field mapping, timestamps, health and coverage, and troubleshoot issues across source systems and Azure services • Tune analytics rules, alert logic and incident generation with SOC and detection engineering teams • Onboard and integrate Microsoft Defender XDR workloads including Defender for Endpoint, Defender for Identity, Defender for Office 365 and Defender for Cloud Apps • Produce high-level designs, implementation plans, configuration records, test evidence, operational runbooks and handover documentation • Coordinate with clients, project managers, architects, SOC analysts and service teams on dependencies, risks, actions and service transition readiness • Apply engineering standards, peer review and change control, and improve onboarding templates and internal procedures • Support troubleshooting and remediation during onboarding and early-life support • Undertake occasional travel for client delivery

🎯 Requirements

• Hands-on experience deploying, configuring or supporting Microsoft Sentinel in production or customer environments • Practical knowledge of Sentinel data connectors, Log Analytics workspaces, Azure Monitor Agent, Data Collection Rules, syslog and CEF collection patterns • Strong Kusto Query Language skills for data validation, troubleshooting, investigation and detection tuning • Experience onboarding and troubleshooting log sources across Microsoft 365, Azure, endpoints, identity, network, security and third-party platforms • Understanding of ingestion filtering, data transformation, parsing, normalisation, retention and security telemetry cost implications • Experience creating technical designs and delivery documentation, including HLDs, implementation plans, test records and operational handover materials • Working knowledge of Microsoft Defender XDR and integration of its workloads with Microsoft Sentinel • Understanding of SIEM operations, detection engineering principles, incident workflows and managed security service requirements • Strong troubleshooting skills across Azure, APIs, identity, networking and data collection components • Confident written and verbal communication with technical and non-technical client stakeholders • Ability to manage assigned work independently while collaborating with project, architecture, SOC and service teams • Experience working for an MSSP, MDR provider, Security Operations Centre or security-focused professional services team (desired) • Experience with custom log parsers, KQL functions, ASIM-compatible content or normalisation patterns (desired) • Experience with DevOps pipelines and source control for Microsoft Sentinel content, configuration and deployment (desired) • Knowledge of detection as code, infrastructure as code and automation technologies such as Bicep, ARM templates, Terraform, PowerShell, Azure CLI, Logic Apps or APIs (desired) • Knowledge of Microsoft Sentinel repositories, content management and repeatable multi-customer deployment patterns (desired) • Experience integrating Microsoft security services across tenants, subscriptions or delegated administration models such as Azure Lighthouse (desired) • Familiarity with MITRE ATT&CK (desired) • Microsoft security certifications such as SC-200, AZ-500/SC-500 or SC-100 are desired, not required

🏖️ Benefits

• Learning, development and progression opportunities • Training and certification opportunities across Microsoft security technologies • Support from an experienced team • Occasional travel to support client delivery