Azure Sentinel Security Engineer

Azure Sentinel Security Engineer

Responsibilities:

Logging and Auditing: Monitor and audit cloud infrastructure using Azure Sentinel.

Automated Workflows: Develop and maintain automated workflows for security operations.

Threat Intelligence: Integrate threat intelligence feeds into Sentinel analytics and SOAR.

Incident Response: Develop incident response use cases and remediation recommendations.

Log Integration: Integrate security logs into Azure Log Analytics Workspace.

Collaboration: Work collaboratively with team members and stakeholders to ensure effective communication and project success.

Documentation: Maintain comprehensive documentation related to Azure Sentinel configurations and processes.

Technical Knowledge:

Expertise in Azure Sentinel, Defender, and other Microsoft security tools.

Proficiency in scripting languages such as Python or PowerShell.

Strong knowledge of Azure security services and governance.

Creation of Sentinel Playbooks & dashboards for platform monitoring.

Ingesting of various types of Syslog data, Network devices via Api's etc. along with appropriate DCRs.

Experience with device onboarding, developing SIEM content and using KQL (Kusto Query Language).

Develop and maintain relevant custom scripts/connectors for various device integration.

Familiarity in working & Creation of new SOC Run Books.

Experience in other SIEM tools like ArcSight/Qradar/Splunk.

Certifications such as Microsoft Certified: Azure Security Engineer Associate or similar.

Share your resume to : [email protected]