Magnet Forensics
Microsoft Security Automation & Incident Response Engineer - Contract Position
United States (Remote)contractmidAdded today
About this role
Magnet Forensics seeks a Microsoft Security Automation & Incident Response Engineer to strengthen its security operations by optimizing Microsoft security tools, automating routine tasks, and enhancing incident response workflows. This 3-4 month contract role focuses on improving detection coverage and reducing analyst workload through hands-on engineering.
What you'll do
- Optimize and integrate Microsoft Sentinel and Defender XDR platforms
- Automate repetitive security tasks to reduce manual analyst workload
- Improve detection coverage and alert fidelity across security tools
- Enhance incident response capabilities and workflows
- Accelerate the maturity of the security operations program
- Collaborate with security team to identify automation opportunities
What they're looking for
- Microsoft Sentinel administration and tuning
- Microsoft Defender XDR configuration
- Security automation (playbooks, workflows, scripts)
- Incident response procedures and processes
- Log analysis and threat detection
- KQL (Kusto Query Language)
- PowerShell or Python scripting
- Security operations best practices
Opens the official application on the employer’s site. No login required.
Magnet Forensics
Likely interview questions
- Walk us through your experience designing and deploying Sentinel playbooks for automated incident response.
- How have you used KQL to create detection rules and improve alert fidelity in a SOC environment?