SIEM Associate Manager

Project Role :

Relevant Experiences

srilakshmi.sk@sigmacareers.in

Roles & Responsibilities:
1) Design and implement Microsoft Sentinel architecture, including data connectors, analytics rules, and workbooks.2) Integrate Sentinel with various data sources, including Azure services on-premises systems, and third-party security products.3) Develop and maintain data connectors, APIs and custom integrations.4) Configure and optimize incident response workflows, including automated response actions and playbooks.5) Collaborate with security operations teams to implement Sentinel-based security monitoring and incident response processes.6) Provide training and support to security teams on Sentinel features and functionality7) Continuously monitor and optimize Sentinel performance, scalability, and reliability8) Develop and maintain custom dashboards, reports, and workbooks to provide security insights and metrics. 9) Integrate Azure Logic Apps with Azure Sentinel to automate security workflows and incident response.10) Develop custom connectors for Logic apps to integrate with Azure Sentinel and other security tools. 11) Collaborate with security teams, developers, and operation teams to ensure seamless integration and deployment of Logic Apps with Azure Sentinel12) Configure and maintain Sentinel workspaces, including data connectors, analytics rules. 13) Optimize Sentinel workspace performance, scalability, and security.14) Develop and maintain reports and dashboards to provide visibility into security metrics and trends.15) Strong knowledge of KQL and experience writing complex queries.16) Proficiency in Microsoft Sentinel, Azure Security Center and Azure Monitor17) Have a hands-on experience with Logic Apps, playbook automation.18) Experience with data analytics, machine learning, and threat intelligence.