Security Detection Architect (Microsoft Sentinel & Defender XDR)

This job operates on a hybrid model, requiring you to be based in Bulgaria and work from there.

YOUR MISSION

• Design and own enterprise-grade SIEM / EDR / XDR architectures centered on Microsoft Sentinel and the Microsoft Defender security stack
• Define detection strategy by translating security objectives into actionable use cases, telemetry requirements, and architectural designs
• Engineer advanced detections using KQL , building reusable analytics, baselines, and threat-aligned correlations mapped to MITRE ATT&CK
• Integrate and normalize telemetry across cloud, hybrid, and on-prem sources including endpoints, identities, networks, workloads, and custom logs
• Automate investigation and response through Sentinel playbooks , analytics rules, and workflows using PowerShell and/or Python
• Partner with SO...