Security Consultant Secops

Microsoft · Remote

Source and collection record

Last observed by our collector: 9 October 2026 at 12:51 am IST. This is not a manual review or a confirmation from the employer.

Employer requisition: 200044924

Job type and experience labels are automated discovery categories. The employer determines eligibility. Original experience wording was not retained separately; check the current employer page.

How sourcing and classification work · Report a discrepancy

Your application evidence checklist

Mark the statements you can support after reading the employer source. This checklist stays on this page; it does not score your eligibility or submit an application.

Attendance and availability: I checked the employer page for work location, office attendance, start date and duration.Current requisition: I checked the current employer requisition and its application requirements.

0 of 2 checks marked. Keep unresolved requirements as questions for the employer.

Collected role description

Overview The EAG Security Consultant - SecOps helps customers modernize security operations by designing, implementing, and operationalizing Microsoft Sentinel, Microsoft Defender XDR, Security Copilot, and agentic SOC capabilities. The role blends hands-on delivery, consulting judgment, automation, and customer-facing execution to improve detection, investigation, response, threat hunting, and operational resilience across hybrid and multi-cloud estates. Responsibilities <ul><li style="font-size: 10pt;">Lead SecOps discovery workshops, capture current-state SOC maturity, map detection, response, escalation, and operational gaps, and translate findings into pragmatic modernization roadmaps.</li><li style="font-size: 10pt;">Design and implement Microsoft Sentinel architectures including data onboarding, analytics rules, automation playbooks, workbooks, incident enrichment, and operational reporting.</li><li style="font-size: 10pt;">Operationalize Microsoft Defender XDR workloads across endpoint, identity, cloud, email, and SaaS signals to improve alert fidelity, investigation depth, and response consistency.</li><li style="font-size: 10pt;">Develop KQL hunting logic, incident triage workflows, response playbooks, and reusable delivery assets that reduce manual effort and improve analyst productivity.</li><li style="font-size: 10pt;">Apply agentic SOC patterns using SOCBot / Autonomous SOC concepts, with clear human-in-the-loop approval, read/write separation, auditability, and safe automation guardrails.</li><li style="font-size: 10pt;">Partner with security architects, customer SOC leaders, product groups, and engineering teams to resolve delivery risks, validate design choices, and drive customer outcomes.</li><li style="font-size: 10pt;">Support pre-sales and solution shaping through effort estimation, technical assumptions, discovery questions, solution narratives, and customer-facing demos.</li></ul> Qualifications Technical Depth Expected-SecOps deliveryMicrosoft Sentinel, SIEM/SOAR modernization, Defender XDR, Microsoft Entra security, threat hunting, incident response, SOC operating model, playbooks, dashboards, and reporting.Automation and AISecurity Copilot usage, Azure AI Foundry awareness, Logic Apps, Azure Functions, PowerShell, KQL, APIs, managed identities, OAuth / OBO concepts, and automation safety controls. Required/Minimum Qualifications Consulting and DeliveryExecutive communication, discovery facilitation, architecture documentation, risk-based prioritization, stakeholder management, quality delivery, and reusable IP contribution.Required Qualifications-<ul><li style="font-size: 10pt;">5+ years of experience in cybersecurity consulting, security operations, SOC engineering, incident response, SIEM/SOAR, or related security delivery roles.</li><li style="font-size: 10pt;">Hands-on experience with Microsoft Sentinel and at least two Defender workloads such as Defender for Endpoint, Defender for Identity, Defender for Cloud, Defender for Cloud Apps, or Defender for Office 365.</li><li style="font-size: 10pt;">Strong understanding of detection engineering, incident triage, threat hunting, investigation lifecycle, containment / remediation options, and SOC governance.</li><li style="font-size: 10pt;">Ability to produce high-quality customer-facing deliverables such as architecture documents, discovery outputs, deployment plans, design decisions, risk registers, and operational runbooks.</li><li style="font-size: 10pt;">Working knowledge of KQL, Microsoft security logs, identity and endpoint signals, cloud security telemetry, and common attack techniques.</li><li style="font-size: 10pt;">Experience communicating complex security concepts to technical teams, program stakeholders, and executive audiences.</li><li style="font-size: 10pt;">Degree or equivalent experience in Computer Science, Engineering, Information Security, Cybersecurity, or a related discipline.</li></ul> Additional or Preferred Qualifications <ul><li style="font-size: 10pt;">Ability to identify repeatable delivery IP opportunities and convert project learnings into reusable accelerators, templates, workshops, and enablement materials.</li><li style="font-size: 10pt;">Comfortable working across multi-cloud and hybrid customer environments, including ITSM, CMDB, ticketing, threat intelligence, and vulnerability management integrations.</li><li style="font-size: 10pt;">Growth mindset to continuously learn EAG Security agent portfolio capabilities and position them in customer conversations and delivery engagements.</li></ul> This position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled. <hr> Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances. If you need assistance with religious accommodations and/or a reasonable accommodation due to a disability during the application process, read more about <a href="https://careers.microsoft.com/v2/global/en/accessibility.html">requesting accommodations.</a>

Collected experience requirement

5+ years