微软安全自动化与事件响应工程师 - 合同职位
Microsoft Security Automation & Incident Response Engineer - Contract Position
我们是谁；我们做什么；我们的未来
Magnet Forensics 是数字调查软件开发领域的全球领导者，能够从电脑、智能手机、平板和物联网相关设备中获取、分析并共享证据。我们不断进行创新，使客户能够部署先进的有效工具来保护他们的公司、社区和国家。
为全球数千名客户提供服务，我们的解决方案在现代化数字调查方面发挥着关键作用，帮助调查人员打击犯罪、保护资产并维护国家安全。
我们的员工遍布全球，Magnet Forensics 正在不断扩大其全球影响力。作为 Magnet Forensics 的一员，无论你担任什么角色，都可以对世界产生影响。你将获得学习和发展的支持，更不用说一个拥有非凡才华和诚信的优秀团队。
如果你认为自己是加入我们实现这一目标团队的合适人选，我们很期待收到你的消息！
职位概述
Magnet Forensics 正在寻找一位高度专业的 Microsoft 安全自动化与事件响应工程师，以加快我们安全运营计划的成熟度和效率。
该职位将负责优化和集成 Microsoft 的安全平台，减少手动分析师的工作量，自动化重复任务，提高检测覆盖率，并增强事件响应能力。
理想的候选人是一位具备 Microsoft Sentinel、Defender XDR、自动化和现代安全运营经验的实践型工程师。
这是一份为期 3-4 个月的合同职位
成功指标
我们希望找到一位能符合“技能和经验”中大部分但不是全部要求的人。对我们来说，更重要的是找到那些能通过他们所掌握的技能和参与过的经验展示出成功迹象的候选人，而不是那些“曾经做过”的人。我们希望成为你发展旅程的一部分，我们会从你身上学到很多，正如你从我们这里学到的一样。
我们如何工作
在 Magnet Forensics，我们采用混合灵活的工作方式，以支持你的生产力和工作与生活的平衡。如果你在我们办公室的舒适通勤范围内，你偶尔会来公司现场办公。你来公司的频率取决于你的部门和团队需求，通常从每周到每月不等。这些面对面的时刻有助于加强团队协作。
查看英文原文
Who We Are; What We Do; Where We’re Going
Magnet Forensics is a global leader in the development of digital investigative software that acquires, analyzes, and shares evidence from computers, smartphones, tablets, and IoT-related devices. We are continually innovating so our customers can deploy advanced and effective tools to protect their companies, communities, and countries.
Serving thousands of customers globally, our solutions are playing a crucial role in modernizing digital investigations, helping investigators fight crime, protect assets, and guard national security.
With employees based around the world, Magnet Forensics has been expanding our global presence. As a part of Magnet Forensics, you can expect to make a difference in the world, no matter what role you play. You’ll be supported through learning and development, not to mention an incredible team with unbelievable talent and integrity.
If you think you would be the right person to join our team working towards this goal, we would love to hear from you!
Role Summary
Magnet Forensics is seeking a highly skilled Microsoft Security Automation & Incident Response Engineer to accelerate the maturity and efficiency of our security operations program.
This resource will be responsible for optimizing and integrating Microsoft's security platform, reducing manual analyst workload, automating repetitive tasks, improving detection coverage, and enhancing incident response capabilities.
The ideal candidate is a hands-on engineer with deep experience in Microsoft Sentinel, Defender XDR, automation, and modern security operations.
This is a 3-4 month contract role
Indicators of Success
We’re looking for someone who checks off most, but not all, of the boxes listed in “skills and experiences”. It’s more important to us to find candidates who can display indicators of success through skills they have developed and experiences they have been a part of, than to find folks who have “been there, done that”. We want to be part of your development journey, and we’ll learn as much from you as you learn from us.
How We Work
At Magnet Forensics, we take a hybrid-flexible approach to support your productivity and work-life balance. If you’re within a comfortable travel distance to one of our offices, you’ll occasionally join us in person. How often you’ll come in depends on your department and team needs, typically ranging from weekly to monthly. These in-person moments help us build stronger connections, spark new ideas, and celebrate our successes together. Most days, you can choose what works best for you, while staying in tune with your team’s goals.
We’re excited to welcome you to our team and look forward to achieving great things together - both in the office and wherever you work best!
The Most Important Thing
We’re looking for candidates that can provide examples of how they have demonstrated Magnet CODE in their previous experiences:
CARE – We care about each other and our mission to make a difference in the world.
OWN – We are accountable for our results – while never forgetting to act with integrity, empathy, and respect.
DEDICATE – We put our heart and soul into meeting the needs of our customers and helping them serve the people they protect.
EVOLVE – We are constantly innovating and exploring new ways to work together to make an impact with our work.
Here at Magnet Forensics, we are committed to continuous learning and are focused on building a diverse and inclusive workforce. This commitment will be reflected in our hiring processes and embedded in our values and how we treat one another. If you’re interested in this role, but do not meet all of the qualifications listed above, we encourage you to apply anyways.
Magnet Forensics is an Equal Opportunity Employer and considers applicants for employment without regard to race, colour, religion, sex, orientation, national origin, age, disability, genetics or any other basis forbidden under federal, provincial, or local law. We are committed to providing an inclusive, accessible recruitment process and work environment. Accommodation is available to all applicants upon request throughout the hiring process. Please contact aoda@magnetforensics.com should you require any accommodations.
All offers of employment at Magnet are contingent upon satisfactory completion of a background check. All background checks will be conducted in accordance with all applicable laws. Magnet will consider each position’s job duties, among other factors, in determining what constitutes satisfactory completion of the background check. Refusal to consent to a background check may be grounds for revoking an offer of employment.
US Applicants: Magnet Forensics participates in E-Verify and will provide the federal government with your Form I-9 information to confirm that you are authorized to work in the U.S.
Magnet Forensics handles and uses personal data of job applicants in line with its Recruitment Privacy Policy found here.
What You'll Do
Security Operations Optimization
- Analyze existing alert triage and incident response processes
- Identify operational bottlenecks and manual activities
- Implement improvements that reduce analyst effort and response times
- Improve overall SOC efficiency and effectiveness
Detection Engineering
- Tune Microsoft Sentinel analytics rules
- Reduce false positives and alert fatigue
- Create advanced correlation rules and hunting content
- Improve quality and fidelity of security detections
Security Automation
Design and implement automation for:
- Alert enrichment
- Incident routing
- Ticket creation
- Escalation workflows
- Investigation support
- Standard response actions
Platform Integration
Optimize and integrate:
- Microsoft Sentinel
- Microsoft Defender XDR
- Microsoft Defender for Endpoint
- Microsoft Defender for Identity
- Microsoft Defender for Cloud Apps
- Entra ID
- Zscaler telemetry
- Existing ITSM and ticketing platforms
Incident Response Support
- Improve incident response processes
- Enhance investigation playbooks
- Develop response automation
- Create operational runbooks and documentation
What We're Looking For
Required Qualifications
- 5+ years in Security Operations, Detection Engineering, or Incident Response
- Strong Microsoft Sentinel experience
- Strong Microsoft Defender suite experience
- Advanced KQL skills
- Logic Apps experience
- SOAR automation experience
- SIEM engineering experience
- Security operations workflow optimization experience
Preferred Qualifications
- Microsoft Security certifications
- Threat hunting experience
- Detection engineering background
- Experience integrating third-party security telemetry
- Exposure to Purview and DLP technologies