Cyber Security Lead

Job Title: Cyber Security Lead (Microsoft Security Stack)

Experience: 8–12 Years

Location: Hinjewadi phase 1

Employment Type: Full-time

Role Overview

We are looking for a skilled Cyber Security Lead with hands-on experience in Microsoft security technologies, including Microsoft Sentinel, Defender for XDR, and Cloud Security Posture Management (CSPM). The ideal candidate will be responsible for monitoring, detection, incident response, and improving the overall security posture of the organization.

Key Responsibilities

A. Microsoft Sentinel (SIEM)

• Configure, manage, and maintain Microsoft Sentinel environments


• Develop and fine-tune analytics rules, alerts, and workbooks


• Monitor security events and respond to incidents in real time


• Integrate log sources via connectors (Azure, O365, AWS, etc.)


• Perform threat hunting using KQL (Kusto Query Language)

B. Microsoft Defender for XDR

• Manage and configure Defender products (Defender for Endpoint, Office 365, Identity, Cloud Apps)


• Analyze threats and respond to alerts using XDR portal


• Implement automated response actions and playbooks

C. CSPM (Cloud Security Posture Management)

• Implement and manage CSPM tools (e.g., Microsoft Defender for Cloud)


• Perform cloud security assessments and risk analysis


• Ensure compliance with security frameworks and best practices


• Identify misconfigurations and drive remediation efforts

D. Incident Response & SOC Support

• Investigate and respond to security incidents


• Conduct root cause analysis and provide mitigation recommendations


• Prepare incident reports and documentation


• Participate in SOC operations and escalation handling

Required Skills & Qualifications

• 8–12 years of experience in Cyber Security / SOC operations


• Strong hands-on experience with:


• Microsoft Sentinel (SIEM)


• Microsoft Defender XDR suit


• Microsoft defender for Cloud (CSPM)

Good knowledge

• Azure security concepts and cloud environments


• Threat detection and incident response


• Networking fundamentals and security concepts


• Experience in writing KQL queries


• Understanding of MITRE ATT&CK framework


• Familiarity with security standards (ISO 27001, NIST, CIS benchmarks)

Preferred Skills (Good to Have)

• Experience with email security and phishing simulation tools


• Knowledge of automation (Logic Apps / SOAR playbooks)


• Exposure to vulnerability management tools

Certifications

• Microsoft SC-200 (Security Operations Analyst)


• Microsoft AZ-500 (Azure Security Engineer)


• Any SOC /Cybersecurity certification