Job Description:
• Lead end-to-end customer onboarding into SIEM/XDR/MDR platforms, ensuring timely and successful delivery
• Configure and validate Microsoft security services, including Defender XDR and Purview
• Onboard and integrate data sources (identity, endpoint, cloud, SaaS, network logs) into security platforms
• Build and maintain automation workflows using Azure Logic Apps, Power Automate, or similar SOAR tools
• Work closely with customers to gather requirements, validate configurations, and support go-live readiness
• Create and maintain customer-facing documentation, including: As-Built documentation, Onboarding runbooks, Data source inventories, Status trackers
• Support compliance and audit activities by preparing evidence and documentation (FedRAMP, FISMA, CMMC, etc.)
• Collaborate cross-functionally with SOC, engineering, and compliance teams
• Provide status updates and reporting to customers and internal stakeholders
Requirements:
• Experience onboarding customers into SIEM, XDR, MDR, or security operations platforms
• Hands-on experience with Microsoft Defender XDR and/or Microsoft Purview
• Experience working in U.S. federal or highly regulated environments (FedRAMP, FISMA, CMMC, etc.)
• Strong understanding of log ingestion and data integration, including identity, endpoint, and cloud logs
• Experience creating customer-facing technical documentation
• Ability to work independently in a customer-facing delivery role
• Strong communication and stakeholder management skills
• Preferred Qualifications: Microsoft & Azure, Microsoft Defender suite (Endpoint, Identity, Office 365, Cloud), Microsoft Purview (audit logging, compliance, data governance), Microsoft Sentinel, Azure AD / Entra ID, Azure Monitor, Log Analytics, KQL for log analysis and troubleshooting
Benefits:
• Health insurance
• Retirement plans
• Paid time off
• Flexible work arrangements
• Professional development