Job
Description
As a Security Consultant specializing in Microsoft Sentinel & Defender, your role will involve installing and configuring Sentinel SIEM and SOAR solutions for hybrid environments. You will be responsible for configuring data ingestion, storage, and analytics, as well as enhancing the overall security posture to improve detection and response to cyber threats. Your key responsibilities will include: - Installing and configuring Sentinel SIEM and SOAR solutions for hybrid environments - Configuring data ingestion, storage, and analytics - Developing security policies and implementing security measures - Conducting security event correlation and analysis - Strengthening incident response processes - Creating use cases and managing rules in monitoring infrastructure - Installing and configuring Defender for Server with UEBA, FIM, etc. - Installing and configuring Defender for Container with CSPM and CWPA Qualifications required for this role include: - Minimum 5+ years of experience in Cyber Security with a focus on penetration testing or ethical hacking - Demonstrated expertise in SIEM, SOAR, and Defender stack implementation and integration - Bachelor's or Master's degree in Information Security, Cybersecurity, or related field In addition, you should hold at least one of the following certifications: - Microsoft SC200 Microsoft Security Operation Analyst - Security+ - CEH Certified Ethical Hacker - CISSP Certified Information Systems Security Professional Your responsibilities will include: - Designing, implementing, and supporting Microsoft Sentinel SIEM and SOAR - Developing and implementing security policies and procedures - Designing and implementing automated incident response workflows - Investigating security incidents and determining root causes - Remedying security incidents and vulnerabilities - Enhancing analytics using MS Copilot - Collaborating with cybersecurity experts, threat intelligence analysts, and other stakeholders - Providing training and awareness programs for security teams and stakeholders - Generating comprehensive reports detailing simulation results, vulnerabilities identified, and remediation strategies - Providing incident response support Required knowledge and skills for this role: - Expertise in cloud security and security posture management - Extensive experience with MS Sentinel SIEM & SOAR Implementation & integration - Proficiency in Copilot integration - Expertise in using Vulnerability management tools - Experience in automated incident response workflow design and implementation - Experience in SOAR playbook development, integration, and execution - Extensive experience in Defender for Server and Container - Familiarity with various cybersecurity frameworks and standards - Strong understanding of threat intelligence integration and offensive cybersecurity techniques Desirable skills include proficiency in Microsoft Sentinel, Defender, and Copilot. Your competencies should include excellent analytical and problem-solving skills, effective communication and collaboration skills, and the ability to work proactively without supervision. Your mandatory skills for screening include expertise in Microsoft Sentinel SIEM & SOAR, Microsoft Defender for Server and Container, and Microsoft Copilot, with a priority on automation, process, and threat intelligence.,
