Cyber Engineering Consultant – SIEM Data Onboarding

About the role

Deloitte Technology US is seeking a Consultant Cyber Engineering to join its security team. You will be responsible for onboarding security data sources into Microsoft Sentinel, ensuring high‑quality data for monitoring and threat detection, and collaborating with stakeholders to resolve data issues.

Key responsibilities

• Maintain ticket management and DevOps activity tracking for accurate work intake and status reporting.
• Monitor Microsoft product updates and advise on impacts to the environment and customers.
• Create and maintain runbooks, SOPs, and workflow documentation.
• Gather requirements for new data sources, design connectors, and configure Microsoft Sentinel data collection rules.
• Validate ingested data against schema definitions, troubleshoot ingestion failures, and ensure data reliability.
• Perform CIM normalization to support consistent downstream use cases.
• Maintain and update data connectors, DCRs, Logic Apps, and Azure Functions.
• Monitor performance and health of onboarding components and remediate data quality issues.

Required profile

• Ability to work independently while collaborating effectively within a team.
• Strong written and verbal communication skills.
• Detail‑oriented with a focus on data quality and security.

Required skills

• Microsoft Sentinel
• Azure platform
• Logic Apps
• Azure Functions
• SIEM data onboarding
• Data connectors and Data Collection Rules (DCRs)
• CIM (Common Information Model) normalization