Cyber Security Engineer

About the Role:

We are seeking an experienced and highly motivated Cyber Security Analyst to join our team supporting the Digital Health Program (DHP). This role is suited for a SOC Level 23 Analyst/Engineer with strong technical expertise across the Microsoft security ecosystem and Azure environment. You will play a key role in monitoring, detecting, analyzing, and responding to security threats and incidents, while also contributing to the development and enhancement of our security posture.

Key Responsibilities:

• Monitor and respond to security alerts and incidents within the SOC environment (Level 2–3 support).
• Analyze and triage events from Microsoft Defender, Sentinel, and related tools to determine scope and impact.
• Conduct in-depth investigations, threat hunting, and incident response across Microsoft 365 and Azure environments.
• Manage and tune Microsoft Sentinel analytics rules and automation playbooks.
• Implement and maintain security policies and controls in Microsoft Intune and Entra ID.
• Collaborate with IT and engineering teams to remediate vulnerabilities and apply security best practices.
• Provide input into firewall policy management and support secure network architecture in Azure.
• Create documentation, runbooks, and reports on security incidents and metrics.
• Contribute to continuous improvement of SOC operations, tooling, and processes.

Key Skills and Experience:

Required:

• 4–10 years in a cyber security or SOC analyst role, with Level 2 or 3 responsibilities.

• Hands-on experience with:

• Microsoft Defender for Endpoint

• Microsoft Sentinel (SIEM)

• Microsoft Intune (Endpoint Management)

• Entra ID (Identity & Access Management)

• Microsoft 365 and Azure Security controls

• Solid understanding of security monitoring, threat intelligence, and incident response.
• Experience with Azure networking and firewall configuration/management.
• Familiarity with KQL (Kusto Query Language) for log analysis in Sentinel.
• Strong communication skills, both written and verbal.
• Ability to work independently and as part of a cross-functional team.

Desirable:

• Relevant certifications such as:
• Microsoft SC-200: Security Operations Analyst
• AZ-500: Azure Security Engineer
• CompTIA Security+, CySA+, or similar
• Experience in healthcare or government environments.
• Knowledge of compliance frameworks (e.g., ISO 27001, Essential Eight, NIST).