Security Architect

 About The Role  

Project Role :Security Architect

Project Role Description :Define the cloud security framework and architecture, ensuring it meets the business requirements and performance goals. Document the implementation of the cloud security controls and transition to cloud security-managed operations.
Must have skills :Security Information and Event Management (SIEM)

Good to have skills :NAMinimum
5 year(s) of experience is required

Educational Qualification :15 years full time education
Summary:We are seeking a seasoned cybersecurity expert with deep hands-on expertise in Microsoft Sentinel to build, optimize, and automate enterprise-wide detection and response strategies. The role involves advanced threat hunting, analytics rule tuning, SOAR development using Logic Apps, and integration of rich threat intelligence. You will drive architecture for scalable detection pipelines, lead SIEM content management, mentor SOC teams, and actively defend against advanced threats using the MITRE ATT&CK framework.
Roles & Responsibilities:-Architect and maintain scalable Microsoft Sentinel environments, including workspaces, data ingestion pipelines (e.g., Syslog, Azure AD, MDE, custom logs), and data connectors.-Design and implement Sentinel Analytics Rules, perform fine-tuning for detection fidelity, and maintain effective rule lifecycle management.-Build Sentinel Workbooks for advanced visualization, dashboarding, and incident reporting.-Lead normalization and parsing of custom log sources, and support log source onboarding across hybrid and cloud-native environments.-Oversee SIEM content management, ensuring high-quality detections, queries, watchlists, and response mechanisms are consistently updated.-Write and optimize complex KQL (Kusto Query Language) queries for threat hunting, anomaly detection, and analytics rule logic.-Develop and manage SOAR workflows using Microsoft Sentinel Playbooks (Logic Apps) for automated incident response and enrichment.-Conduct deep forensic and threat investigations using Microsoft Defender for Endpoint (MDE) including Advanced Hunting and Live Response.-Integrate third-party tools and threat intel feeds using custom connectors, REST APIs, and Azure-native services.-Analyze attacker TTPs and align detection strategy with MITRE ATT&CK.-Mentor and upskill SOC analysts and security engineers in best practices for Sentinel, MDE, KQL, and automation techniques.-Collaborate closely with detection engineers, cloud security architects, and incident responders.-Participate in red and blue team exercises to continually enhance detection maturity and coverageProfessional & Technical Skills:

-Experience in Security Operations, Incident Response, Threat Detection, or SIEM Engineering.-Proven hands-on expertise in Microsoft Sentinel, including:-Analytics Rule Creation & Fine-tuning-Workbook Creation-Normalization and Parsing-Log Source Onboarding-Data Connectors Management-SIEM Content Development and Maintenance-Advanced proficiency in KQL (Kusto Query Language) for detection engineering and hunting.-Strong experience in Logic Apps-based automation (Sentinel Playbooks) and SOAR frameworks.-Deep understanding of MITRE ATT&CK and threat modeling.-Familiarity with PowerShell, JSON, REST APIs, Azure Resource Manager (ARM), Azure Monitor, and Event Hub integrations.-Experience with integrating custom and third-party telemetry sources into Sentinel-SC-200:Microsoft Security Operations Analyst-SC-100:Microsoft Cybersecurity Architect-AZ-500:Microsoft Azure Security Technologies-GCFA / GCIA (SANS) for forensic/network detection expertise-MITRE ATT&CK Defender (MAD) certifications-CISSP, CEH, or equivalent industry-recognized credentials
Additional Information:- The candidate should have minimum 5 years of experience in Security Information and Event Management (SIEM).- This position is based at our Pune office.- A 15 years full time education is required. Qualification 
15 years full time education