Job
Description
Role Overview: You will be responsible for configuring Microsoft Sentinel solutions to monitor and respond to security threats. Additionally, you will create and optimize Sentinel playbooks, workbooks, and hunting queries for proactive threat detection. Your role will involve managing data connectors, integrating Sentinel with various security tools and logs, and automating security processes using KQL. Collaboration with SOC teams to enhance security monitoring and incident response will be key, as well as ensuring compliance with industry security standards and best practices. You will also be involved in conducting security assessments and recommending improvements for cloud security posture. Key Responsibilities: - Configure Microsoft Sentinel solutions to monitor and respond to security threats - Create and optimize Sentinel playbooks, workbooks, and hunting queries for proactive threat detection - Manage data connectors and integrate Sentinel with various security tools and logs - Automate security processes using KQL - Collaborate with SOC teams to enhance security monitoring and incident response - Ensure compliance with industry security standards and best practices - Conduct security assessments and recommend improvements for cloud security posture Qualification Required: - Strong experience with Microsoft Sentinel architecture, including workspaces, playbooks, and automation - Expertise in Azure Cloud, including Azure Defender for cloud, XDR (MDE/MDI/MDO), and Azure EntraID - Proficiency in KQL and other scripting languages for automation - Experience with SIEM solutions and security monitoring tools such as Splunk - Knowledge of network security, identity management, and cloud security best practices - Strong analytical and problem-solving skills - Certifications such as Microsoft Certified: Security Operations Analyst Associate or Azure Security Engineer Associate are a plus - Experience of Azure Key Vault creation, configuration, and maintenance - Experience of Private Endpoints, VNETs, Subnets - Experience of Entra ID including creating users, user groups, Service Principles, and access management - Experience of RBAC mapping and modelling - Experience of Storage Accounts and Log Analytics Workspaces - Excellent documentation and communication skills Role Overview: You will be responsible for configuring Microsoft Sentinel solutions to monitor and respond to security threats. Additionally, you will create and optimize Sentinel playbooks, workbooks, and hunting queries for proactive threat detection. Your role will involve managing data connectors, integrating Sentinel with various security tools and logs, and automating security processes using KQL. Collaboration with SOC teams to enhance security monitoring and incident response will be key, as well as ensuring compliance with industry security standards and best practices. You will also be involved in conducting security assessments and recommending improvements for cloud security posture. Key Responsibilities: - Configure Microsoft Sentinel solutions to monitor and respond to security threats - Create and optimize Sentinel playbooks, workbooks, and hunting queries for proactive threat detection - Manage data connectors and integrate Sentinel with various security tools and logs - Automate security processes using KQL - Collaborate with SOC teams to enhance security monitoring and incident response - Ensure compliance with industry security standards and best practices - Conduct security assessments and recommend improvements for cloud security posture Qualification Required: - Strong experience with Microsoft Sentinel architecture, including workspaces, playbooks, and automation - Expertise in Azure Cloud, including Azure Defender for cloud, XDR (MDE/MDI/MDO), and Azure EntraID - Proficiency in KQL and other scripting languages for automation - Experience with SIEM solutions and security monitoring tools such as Splunk - Knowledge of network security, identity management, and cloud security best practices - Strong analytical and problem-solving skills - Certifications such as Microsoft Certified: Security Operations Analyst Associate or Azure Security Engineer Associate are a plus - Experience of Azure Key Vault creation, configuration, and maintenance - Experience of Private Endpoints, VNETs, Subnets - Experience of Entra ID including creating users, user groups, Service Principles, and access management - Experience of RBAC mapping and modelling - Experience of Storage Accounts and Log Analytics Workspaces - Excellent documentation and communication skills
