Job
Description
Job Summary: We are seeking a skilled and proactive Security Engineer with strong experience in Microsoft Sentinel administration , email threat management , log monitoring , security integrations , and familiarity with GytPol . The ideal candidate will play a key role in protecting the organization’s information systems through continuous threat detection, response, and security optimization. Key Responsibilities: Microsoft Sentinel Administration: Configure, manage, and optimize Microsoft Sentinel SIEM platform. Develop and fine-tune KQL queries and analytics rules. Design and maintain workbooks, dashboards, and automation playbooks (using Logic Apps). Perform incident triage and response via Sentinel and integrated tools. Integration & Monitoring: Integrate third-party and Microsoft security solutions into Sentinel. Implement and maintain log ingestion from various data sources. Ensure seamless correlation of data across diverse security systems. Email Threat Management: Configure and manage Microsoft Defender for Office 365 (or equivalent). Monitor and respond to email-based threats, phishing attempts, and spam campaigns. Coordinate with IT and user teams to improve mail hygiene and awareness. Log & Security Monitoring: Oversee central logging and ensure comprehensive visibility across endpoints, servers, and cloud services. Identify anomalies, investigate suspicious activity, and implement alerting mechanisms. GytPol Usage & Optimization: Utilize GytPol Validator to assess and enhance endpoint security posture. Work with IT to remediate configuration risks and align with security policies. Security Best Practices & Compliance: Stay updated on the latest cybersecurity threats, tools, and techniques. Support compliance initiatives (ISO 27001, NIST, GDPR, etc.) through technical controls and reporting. Required Skills & Qualifications: Proven experience in Microsoft Sentinel SIEM administration and KQL scripting. Strong understanding of email threat vectors and experience with email security platforms (Defender for O365, Mimecast, Proofpoint, etc.). Experience with security log management and monitoring best practices. Working knowledge of Logic Apps, Azure Monitor, and Azure Security Center. Familiarity with GytPol Validator or similar configuration validation tools. Strong analytical, investigative, and troubleshooting skills. Relevant certifications (e.g., AZ-500, SC-200, CEH, or equivalent) are a plus. Preferred Experience: Hands-on experience with security automation (SOAR). Working knowledge of Active Directory, Azure AD, and cloud security. Exposure to vulnerability management and endpoint protection platforms. Understanding of Zero Trust frameworks and compliance standards. Job Type: Full-time Pay: ₹276,546.78 - ₹2,100,000.00 per year Benefits: Health insurance Provident Fund Schedule: Rotational shift Experience: Security Engineer: 5 years (Required) Sentinel Administration: 2 years (Required) Integration: 1 year (Required) Email Threat management: 1 year (Required) Work Location: In person
