BDO RISE is hiring SIEM Engineer - Microsoft Sentinel - AHM/GGN/BGLR

Job Duties:

• Work on Cloud SIEM project implementations for various customers in different locations across the world (remotely), starting with deployment and use case tune-up
• Work with Managed Sentinel Lead Architects and other security partners to develop and tune-up correlation rules
• Create and develop new SOC SIEM use cases as per the customer requirements
• Developing, implementing, and executing standard procedures for the administration and operation of Azure Sentinel including:
• Capacity planning (Long-term/Short-term storage)
• Change management (Analytic(Detections)/Workbooks/Playbooks/Notebooks versioning)
• Lifecycle upgrade management
• Tune Microsoft Sentinel KQL performance and event data quality to maximize Microsoft Sentinel efficiency and assists with Data Source correlation using Microsoft Sentinel.
• Provide proactive feedback to enable improvement of the current monitoring rules, based on information and knowledge/experience
• Ability to react quickly, decisively and deliberately in high-stress, high-impact situations
• Creates daily, weekly, and monthly report for Security Management Team
• Perform investigation and escalation for complex or high severity security threats or incidents
• Updates runbooks and procedures as needed
• Compile statistics and contribute to the improvement and creation of playbooks
• Use public cyber security resources (e.g. sites/blogs/podcasts) to stay up to date with latest news, threats, and security analysis tools

Experience

• Four (4) or more years of experience working in an Azure engineering role, required.
• Two (2) or more years of experience working with Azure Sentinel and Azure Log Analytics, required.
• Three (3) or more years of experience of IT SOC operations, required
• Three (3) or more years of experience in infosec, cybersecurity, system or networking, required
• Experience working in a capacity to prioritize issues, develop and pinpoint solutions, and suitably escalate concerns in a high-speed setting, preferred Two (2) or more years of experience within cloud technologies such as Microsoft Defender for Cloud, Microsoft Defender for Cloud Apps, Azure Network Security, Entra Permission Management, preferred
• Prior experience with help desk ticketing systems and service desk management tools, preferred