Microsoft Sentinel Engineer / SME / Architect
About The Opportunity Granular Tek, LLC is a fast-growing cybersecurity and cloud-native security automation firm specializing in Microsoft Security ecosystems. We help enterprise clients across industries implement, optimize, and scale their threat detection and response capabilities using Microsoft Sentinel, Defender, and Azure-native security orchestration tools. Our engineers work directly with Fortune 500, federal agencies, and mid-market innovators to turn security data into actionable intelligence—while reducing mean time to detect (MTTD) and mean time to respond (MTTR). Role & Responsibilities Design, deploy, and optimize Microsoft Sentinel workspaces—configuring data connectors, KQL-based detection rules, and incident response playbooks. Architect cloud-native SIEM/SecOps solutions integrating Azure Sentinel with Microsoft Defender, Logic Apps, Entra ID, and custom APIs. Develop and tune KQL queries and analytics rules to surface advanced threats, compliance violations, and insider risks. Automate incident triage and response using Azure Logic Apps, Sentinel Playbooks, and SOAR-integrated workflows. Collaborate with security analysts to define MITRE ATT&CK-based detection frameworks and improve detection coverage. Lead technical workshops, create architecture diagrams, and document security operations workflows for client handoff and audit readiness. Skills & Qualifications Must-Have Microsoft Sentinel KQL (Kusto Query Language) Azure Logic Apps Microsoft Defender for Cloud MITRE ATT&CK Framework Azure Functions SIEM Architecture SOAR Orchestration Preferred Microsoft Certified: Azure Security Engineer Associate Experience with Azure Sentinel Playbooks Knowledge of Azure Monitor & Azure Data Explorer Benefits & Culture Highlights 100% remote-first culture with flexible hours and no commute. Opportunity to lead high-impact security projects for enterprise clients globally. Continuous learning budget + Microsoft certification reimbursements. Skills: siem/soar,security automation,microsoft sentinel,azure security,azure functions