Microsoft Sentinel Security Consultant

Job description

As one of Microsoft’s most recognized global partners, Quisitive sits at the forefront of cloud transformation, enterprise data strategy, cybersecurity, and the emerging frontier of agentic AI. Here, consultants and technologists operate on the edge of innovation—supported by a culture that values craftsmanship, open collaboration, and technical expertise. If you’re looking for a place where you can innovate, solve complex problems, and build solutions that make a measurable impact, join us. Spyglass is Quisitive’s Security-as-a-Service offering — a modern, insight-driven approach to managed security that goes beyond alerts and tickets. In this role, you’ll help customers turn Microsoft Sentinel insights into better decisions and measurable risk reduction. *This is a remote position and can be based anywhere in the continental US.* ### About the Role The **Microsoft Sentinel Security Consultant** is a customer-facing, advisory role focused on translating Microsoft Sentinel telemetry into clear, actionable security guidance. This is not a traditional SOC role. Instead, it’s designed for professionals who enjoy analyzing patterns, explaining security findings, and coaching customers on how to improve their security posture over time. You’ll work closely with Spyglass Security Coaches, SecOps teams, and Customer Success Managers to help customers understand what Sentinel is telling them, why it matters, and what to do next. ### What You’ll Do #### Microsoft Sentinel Advisory (Primary Focus) - Review and interpret Microsoft Sentinel incidents, analytics rules, detections, and trends for assigned customers - Analyze recurring security signals to identify attack patterns, control gaps, and risk trends over time - Develop, read, and explain KQL queries, workbooks, and Sentinel dashboards - Partner with MDR and SecOps teams to validate detections, distinguish real risk from noise, and convert findings into advisory recommendations - Guide customers on how to act on Sentinel insights, not just respond to alerts #### Security Coaching & Advisory - Support and contribute to monthly Spyglass security coaching sessions - Translate technical Sentinel outputs into clear, business-relevant narratives - Participate in executive and technical security advisory discussions - Contribute to customer security roadmaps informed by Sentinel-driven insights #### Platform & Control Alignment - Assess customer security posture across Microsoft Sentinel, Microsoft Defender XDR, and Entra ID - Map Sentinel findings to security frameworks such as NIST CSF and CIS Controls - Identify gaps in telemetry, detection coverage, and control effectiveness #### Delivery & Collaboration - Support Spyglass flex work by helping scope, estimate, and validate customer security engagements - Develop customer-facing materials such as security narratives, coaching decks, and Sentinel-backed summaries - Collaborate closely with Security Coaches, Customer Success Managers, and SecOps teams ### ### What We’re Looking For #### Required Qualifications - Hands-on experience with Microsoft Sentinel, including incident review, analytics rules, workbooks, and KQL - Working knowledge of Microsoft Defender for Endpoint, Identity, Office 365, Cloud Apps, and Entra ID - Ability to communicate security insights clearly to non-SOC and business audiences - Experience in a consultative or advisory security role - Strong ownership mindset and customer-focused communication skills - Ability to work with and balance workload with multiple customers #### Preferred Qualifications - Experience delivering recurring security coaching or advisory services - Familiarity with NIST CSF and CIS Controls - Experience supporting regulated industries such as healthcare or financial services - Microsoft security certifications (SC-200, SC-300, SC-400, AZ-500) ​ US Citizens, Green Card holders and those authorized to work in the US are encouraged to apply. We are unable to offer sponsorship at this time. **About** **Quisitive**​ With significant growth since 2016, Quisitive is rapidly progressing our vision of becoming the leading global Microsoft partner as we continue to expand across the United States, Canada and India. With a diversified delivery model that includes both nearshore and offshore capabilities, our team of Microsoft experts delivers cloud solutions, artificial intelligence and business applications that transform our clients’ businesses and achieve remarkable business outcomes. ​