Summary: Weaver is looking for an Information Security Technical Engineer to join our Information Security team. The Information Security Technical Engineer responsible for monitoring, detecting, investigating, and responding to security threats across enterprise environments using Microsoft Defender XDR and Microsoft Sentinel. The role requires hands-on experience with endpoint, identity, email, and cloud security, along with SIEM/SOAR-driven incident response. The engineer will work closely with IT, infrastructure, and compliance teams to strengthen the organization's security posture and ensure timely remediation of security incidents.
Essential Duties And Responsibilities
Security Monitoring & Incident Response
- Implement, deploy, manage, monitor and analyze security alerts and incidents using Microsoft Defender XDR (Defender for Endpoint, Identity, Office 365, Cloud Apps).
- Investigate security incidents, perform root cause analysis, containment, eradication, and recovery activities.
- Correlate alerts across multiple security tools to identify advanced threats and attack patterns.
SIEM & Threat Detection
- Configure, manage, and optimize Microsoft Sentinel analytics rules, workbooks, and dashboards.
- Perform threat hunting using KQL queries and Sentinel hunting capabilities.
- Integrate log sources and threat intelligence feeds into Sentinel.
Security Engineering & Hardening
- Support deployment, tuning, and maintenance of Microsoft security solutions across endpoints, servers, and cloud workloads.
- Assist in improving detection logic aligned with MITRE ATT&CK framework.
- Collaborate with infrastructure and cloud teams to implement security best practices.
Compliance & Documentation
- Maintain incident reports, investigation findings, and remediation actions in ticketing systems.
- Support audits, risk assessments, and vulnerability remediation tracking.
- Contribute to security policies, procedures, and standard operating guidelines.
Corporate Compliance Responsibilities
Demonstrates a thorough understanding of, and consistently follows, the firm's established compliance policies and procedures. Ensures that all staff receive appropriate training and are regularly assessed on their knowledge and adherence to job-specific compliance requirements.
Education
Job Requirements:
- Bachelor's degree in IT or related field.
- One or more certifications such as Network+ and/or Security+, Microsoft certifications such as SC-200, SC-300, SC-400, AZ-500, are preferred.
Technical Skills
- Strong hands-on experience with Microsoft Defender XDR
- Strong working knowledge of SIEM/SOAR. Ex: Microsoft Sentinel
- Experience in security alert triage, incident response, and threat analysis
- Good understanding of endpoint, identity, email, and cloud security concepts
- Working knowledge of KQL, log analysis, and threat intelligence
- Familiarity with MITRE ATT&CK, phishing analysis, malware analysis, and IOC-based detection
Soft Skills
- Strong analytical and problem-solving skills
- Ability to work independently and in a team-oriented SOC environment
- Clear communication and documentation skills
- Ability to handle incidents in high-pressure situations