Microsoft Sentinel Security Consultant

As one of Microsoft’s most recognized global partners, Quisitive sits at the forefront of cloud transformation, enterprise data strategy, cybersecurity, and the emerging frontier of agentic AI. Here, consultants and technologists operate on the edge of innovation—supported by a culture that values craftsmanship, open collaboration, and technical expertise. If you’re looking for a place where you can innovate, solve complex problems, and build solutions that make a measurable impact, join us.

Spyglass is Quisitive’s Security-as-a-Service offering — a modern, insight-driven approach to managed security that goes beyond alerts and tickets. In this role, you’ll help customers turn Microsoft Sentinel insights into better decisions and measurable risk reduction.

About the Role

The Microsoft Sentinel Security Consultant is a customer-facing, advisory role focused on translating Microsoft Sentinel telemetry into clear, actionable security guidance. This is not a traditional SOC role. Instead, it’s designed for professionals who enjoy analyzing patterns, explaining security findings, and coaching customers on how to improve their security posture over time.

You’ll work closely with Spyglass Security Coaches, SecOps teams, and Customer Success Managers to help customers understand what Sentinel is telling them, why it matters, and what to do next.

What You’ll Do

Microsoft Sentinel Advisory (Primary Focus)

Review and interpret Microsoft Sentinel incidents, analytics rules, detections, and trends for assigned customers

Analyze recurring security signals to identify attack patterns, control gaps, and risk trends over time

Develop, read, and explain KQL queries, workbooks, and Sentinel dashboards

Partner with MDR and SecOps teams to validate detections, distinguish real risk from noise, and convert findings into advisory recommendations

Guide customers on how to act on Sentinel insights, not just respond to alerts

Security Coaching & Advisory

Support and contribute to monthly Spyglass security coaching sessions

Translate technical Sentinel outputs into clear, business-relevant narratives

Participate in executive and technical security advisory discussions

Contribute to customer security roadmaps informed by Sentinel-driven insights

Platform & Control Alignment

Assess customer security posture across Microsoft Sentinel, Microsoft Defender XDR, and Entra ID

Map Sentinel findings to security frameworks such as NIST CSF and CIS Controls

Identify gaps in telemetry, detection coverage, and control effectiveness

Delivery & Collaboration

Support Spyglass flex work by helping scope, estimate, and validate customer security engagements

Develop customer-facing materials such as security narratives, coaching decks, and Sentinel-backed summaries

Collaborate closely with Security Coaches, Customer Success Managers, and SecOps teams

What We’re Looking For

Required Qualifications

Hands-on experience with Microsoft Sentinel, including incident review, analytics rules, workbooks, and KQL

Working knowledge of Microsoft Defender for Endpoint, Identity, Office 365, Cloud Apps, and Entra ID

Ability to communicate security insights clearly to non-SOC and business audiences

Experience in a consultative or advisory security role

Strong ownership mindset and customer-focused communication skills

Ability to work with and balance workload with multiple customers

Preferred Qualifications

Experience delivering recurring security coaching or advisory services

Familiarity with NIST CSF and CIS Controls

Experience supporting regulated industries such as healthcare or financial services

Microsoft security certifications (SC-200, SC-300, SC-400, AZ-500)

​

US Citizens, Green Card holders and those authorized to work in the US are encouraged to apply. We are unable to offer sponsorship at this time.

About Quisitive ​

With significant growth since 2016, Quisitive is rapidly progressing our vision of becoming the leading global Microsoft partner as we continue to expand across the United States, Canada and India. With a diversified delivery model that includes both nearshore and offshore capabilities, our team of Microsoft experts delivers cloud solutions, artificial intelligence and business applications that transform our clients’ businesses and achieve remarkable business outcomes. ​