SOC Operations Specialist

SOC Operations Specialist

Key Responsibilities

• Lead end-to-end

  threat detection, investigation, and response

  using Microsoft Sentinel & Defender XDR.
• Develop and optimize

  KQL queries

  , custom analytics rules, dashboards, and automated playbooks.
• Administer and maintain

  Sentinel environments

  , integrations, and connectors.
• Conduct

  threat hunting

  and guide L1/L2 analysts during escalations.
• Document

  detection logic, automation workflows, and response procedures

  .
• Participate in

  Red/Blue team exercises

  and proactive security assessments.
• Support

  automation, DevSecOps, and CI/CD

  for continuous security content deployment.

Required Skills & Expertise

• 68 years of hands-on experience in

  SOC operations or cybersecurity

  roles.
• Proficiency in

  Microsoft Sentinel, Defender XDR, KQL, and SOAR (Logic Apps)

  .
• Strong understanding of

  incident response, MITRE ATT&CK framework

  , and

  Azure cloud security

  .
• Solid analytical and problem-solving skills with excellent documentation ability.
• Strong communication and collaboration skills to work in dynamic SOC environments.

Preferred Qualifications

• Certifications such as

  SC-200 (Microsoft Security Operations Analyst)

  ,

  SC-100 (Cybersecurity Architect)

  , or

  AZ-500 (Azure Security Engineer)

  are a plus.