Senior Cloud Security Engineer Microsoft Sentinel & Threat Hunting

• Deploy and configure

  Microsoft Sentinel

  and dependent resources.
• Integrate diverse data sources into SIEM for holistic threat visibility.
  
• Develop advanced

  KQL queries

  and build analytical rules and alerts.
• Design and implement

  use cases

  aligned to

  NIST

  and

  MITRE ATT&CK

  frameworks.
• Build

  SOAR workflows

  using

  Azure Logic Apps

  for automated incident response.
• Perform

  threat hunting

  and simulate non-invasive attacks based on TTPs and threat actor behavior.
• Conduct forensic analysis, root cause analysis, and incident triage.
  
• Leverage threat intelligence for proactive defense and detection strategies.
  
• Create and maintain KPI dashboards and reporting metrics.
  
• Build

  Proof of Concepts (PoCs)

  for domain-specific security implementations.
• Utilize and maintain

  EDR and CASB tools

  , preferably Microsoft Defender ATP.
• Maintain and enhance security in

  hybrid and multi-cloud

  environments (Azure, AWS, GCP).
• Create custom

  security policies

  , dashboards, and workbooks in Sentinel.
• Participate in

  compliance control strategies

  (e.g., PCI, PII) using

  Azure Automation

  .
• Support

  Cloud Security Posture Management (CSPM)

  tool testing and policy scoring.
• Support in

  report generation

  (daily, weekly, quarterly, annually) for various stakeholders.

Technical Skills & Experience:

• Deep understanding of

  Active Directory, DNS Security, Network Protocols, Web Technologies

  , TLS, and Firewalls.
• Proficient in

  EDR solutions

  , preferably

  Microsoft Defender ATP

  .
• Hands-on with

  Azure cloud security

  technologies: Defender for Cloud, Defender for Identity, Defender for Office365, etc.
• Exposure to

  GCP

  (Security Command Center, Confidential Computing) and

  AWS

  (Security Hub, GuardDuty, Macie) is a plus.
• Proficient in

  PowerShell, Bash, Python

  scripting (preferred but not mandatory).
• Knowledge of

  IT Forensics

  tools, techniques, and methodologies.
• Experience in

  policy creation, dashboarding

  , and process automation.

Good to Have:

• Exposure to

  Cloud App Security

  ,

  Azure Key Vault

  ,

  Confidential Computing

  ,

  AWS Shield

  , etc.
• Certifications like

  AZ-500

  ,

  SC-200

  ,

  AWS Certified Security

  , etc.
• Experience with

  setting up SOC processes

  or

  security frameworks

  .