Technology Consultant

Job Summary:

Key Responsibilities:

• Manage and maintain the SIEM infrastructure, particularly MDE, ensuring optimal performance and uptime.
• Monitor and analyze security alerts and events from various data sources within the Microsoft ecosystem.
• Perform advanced threat hunting, detection, and analysis using MDE and related SIEM tools.
• Develop, tune, and optimize detection rules, dashboards, and reports.
• Investigate and respond to security incidents, conducting root cause analysis and implementing mitigations.
• Collaborate with IT and Security teams to integrate new data sources and refine monitoring strategies.
• Conduct system upgrades, patch management, and version control to maintain security tool effectiveness.
• Document incidents, procedures, and technical configurations.
• Train and mentor junior security analysts in leveraging SIEM and MDE effectively.

Qualifications:

• Bachelors degree in computer science, Information Security, or related field (or equivalent experience).
• Minimum of 3-5 years of experience working with SIEM platforms, specifically Microsoft Defender for Endpoint (Level 2 and above).
• Strong understanding of threat detection, incident response, and security operations.
• Proficiency in scripting (e.g., PowerShell, Python) for automation and log parsing.
• Hands-on experience with security monitoring, event correlation, and log management.
• Excellent problem-solving skills and attention to detail.
• Relevant certifications (e.g., Microsoft Certified: Security Operations Analyst, CompTIA Security+, CISSP) are a plus.

Key Competencies:

• Analytical thinking and threat analysis
• Strong communication and collaboration skills
• Adaptability and continuous learning
• Proactive problem-solving