Cyber Defense

• Microsoft Sentinel .

Airlock Secure Access Gateway / Application Whitelisting (policy management, request handling, security rule configuration).

Must have:

• Good understanding of SIEM/SOAR, network security, endpoint protection, and incident response processes.
• Familiarity with MITRE ATT&CK framework, threat intelligence, and log correlation techniques.
• Knowledge of Windows, Linux, Active Directory, and cloud (Azure / AWS) security concepts.
• Strong analytical and communication skills; ability to work effectively in high-pressure environments.
• Perform in-depth threat hunting, log analysis, and correlation of events across multiple sources.

Create and maintain documentation, including incident reports, runbooks, and SOPs.

Good to have

• Hands-on experience in handling L2 analysis of alert triggered from Microsoft Sentinel .

Hands-on experience with Airlock Secure Access Gateway / Application Whitelisting (policy management, request handling, security rule configuration).