Note: The job is a remote job and is open to candidates in USA. Quisitive is a global Microsoft partner focused on cloud transformation, enterprise data strategy, cybersecurity, and agentic AI. The Microsoft Sentinel Security Consultant will analyze Sentinel telemetry, identify security risks and control gaps, and translate findings into actionable customer guidance. The role also supports security coaching, platform alignment, customer roadmaps, and collaborative security engagements.
Responsibilities
- Review and interpret Microsoft Sentinel incidents, analytics rules, detections, and trends for assigned customers
- Analyze recurring security signals to identify attack patterns, control gaps, and risk trends over time
- Develop, read, and explain KQL queries, workbooks, and Sentinel dashboards
- Partner with MDR and SecOps teams to validate detections, distinguish real risk from noise, and convert findings into advisory recommendations
- Guide customers on how to act on Sentinel insights, not just respond to alerts
- Support and contribute to monthly Spyglass security coaching sessions
- Translate technical Sentinel outputs into clear, business-relevant narratives
- Participate in executive and technical security advisory discussions
- Contribute to customer security roadmaps informed by Sentinel-driven insights
- Assess customer security posture across Microsoft Sentinel, Microsoft Defender XDR, and Entra ID
- Map Sentinel findings to security frameworks such as NIST CSF and CIS Controls
- Identify gaps in telemetry, detection coverage, and control effectiveness
- Support Spyglass flex work by helping scope, estimate, and validate customer security engagements
- Develop customer-facing materials such as security narratives, coaching decks, and Sentinel-backed summaries
- Collaborate closely with Security Coaches, Customer Success Managers, and SecOps teams
Skills
- Hands-on experience with Microsoft Sentinel, including incident review, analytics rules, workbooks, and KQL
- Working knowledge of Microsoft Defender for Endpoint, Identity, Office 365, Cloud Apps, and Entra ID
- Ability to communicate security insights clearly to non-SOC and business audiences
- Experience in a consultative or advisory security role
- Strong ownership mindset and customer-focused communication skills
- Ability to work with and balance workload with multiple customers
- US Citizens, Green Card holders and those authorized to work in the US are encouraged to apply
- Experience delivering recurring security coaching or advisory services
- Familiarity with NIST CSF and CIS Controls
- Experience supporting regulated industries such as healthcare or financial services
- Microsoft security certifications (SC-200, SC-300, SC-400, AZ-500)
Benefits
- This is a remote position and can be based anywhere in the continental US.
Company Overview