SIEM Consultant

As a SIEM Consultant at MHP Romania, you will assess, design, and optimize SIEM architectures, onboard new customers, and take over existing environments.

Responsibilities:

• Lead greenfield and brownfield Microsoft Sentinel deployments for enterprise customers
• Execute SIEM migrations from platforms such as Splunk, QRadar, SentinelOne, ArcSight, or other SIEM technologies to Microsoft Sentinel
• Design and implement log onboarding strategies, data connectors, normalization, and ingestion optimization
• Develop and tune Analytics Rules, KQL detections, Workbooks, and Hunting Queries
• Create and implement SOAR automations and Azure Logic App playbooks
• Conduct customer workshops, architecture reviews, and best-practice consulting sessions
• Develop transition plans, operational handover documentation, playbooks, and runbooks
• Support pre-sales activities, effort estimations, and technical solution proposals

Qualifications:

• 4+ years of experience with SIEM technologies and cybersecurity engineering
• Proven hands-on implementation experience with Microsoft Sentinel
• Experience designing and deploying Microsoft security solutions: Microsoft Defender XDR, Defender for Endpoint, Defender for Identity, Defender for Cloud, Microsoft Entra ID
• Strong KQL (Kusto Query Language) skills
• Experience integrating log sources: Firewalls (Check Point, Palo Alto, Fortinet), Microsoft 365, Active Directory, Azure, Linux/Windows servers, Network and security appliances
• Experience with automation and orchestration using Logic Apps / SOAR technologies
• Experience performing SIEM transitions, migrations, or customer onboarding projects
• Good understanding of SOC processes, detection engineering, and incident response workflows

Benefits:

• Start date: by arrangement (always on the 1st and 15th of the month)
• Working hours: full-time (40h)
• Vacation days: 27
• Employment contract: Unlimited
• Line of work: Consulting
• Language skills: Fluency in written and spoken English; German is an advantage
• Flexibility & willingness to travel
• Other: a valid work permit