Cyber Security Engineer

Job Title: Cyber Security Engineer (Microsoft Security Stack)

Experience: 5+ Years

Location: Hinjewadi phase 1

Employment Type: Full-time

Shift: 24*7 Rotaitional

Role Overview

We are looking for a skilled Cyber Security Engineer with hands-on experience in Microsoft security technologies, including Microsoft Sentinel, Defender for XDR, and Cloud Security Posture Management (CSPM). The ideal candidate will be responsible for monitoring, detection, incident response, and improving the overall security posture of the organization.

Experiance required:

• 5+years of experience in Cyber Security

• Strong hands-on experience with:

• Microsoft Sentinel (SIEM)

• Microsoft Defender XDR suite

• Microsoft Defender for Cloud (CSPM)

• Good knowledge of:

• Azure security concepts and cloud environments

• Threat detection and incident response

• Networking fundamentals and security concepts

• Experience in writing KQL queries

• Understanding of MITRE ATT&CK framework

• Familiarity with security standards (ISO 27001, NIST, CIS benchmarks)

• Designing and implementing Incident Response automation, Azure policies, Microsoft Sentinel and Azure Security.

• Implementing threat-hunting & threat-management using Microsoft Sentinel, ADX and Log Analytics.

• Designing & implementing and operating security incident management process & and platform as part of threat management.

• Implementation of Playbooks, Workbooks, Notebooks for resolution, automated resolution framework, and enforcement security.

• Enable Threat Problem Management: Aligning other parts of the security domain (IDM, IAM, Data security, etc.) with detected/discovered threats or security incidents to ensure shift-left in threat management.

• Designing & implementing infra-authentication & authorization, infrastructure automation (infra-as-code, gitops), config management • Designing & and implementing policies for data encryption, data access, DB logging, and data retention.

• Designing & and implementing for secrets and key management, auto log enablement, and log aggregation for DLP/SIEM through KeyVault

. • Configure and implement security use cases, playbooks, reports, and dashboards in SIEM.

• Incident Response through SIEM, EDR.

• Malware Analysis, Forensic Analysis, and Email Investigation.

• Integrating various data sources to ingest security in Log Analytics Workspace.

• To manage identities, apps, and devices securely through Microsoft Intune.

• Manage and troubleshoot the issue in Azure Sentinel, Splunk, and QRadar.

• Implementation of SOAR to automate incident response.

• Managing the Microsoft Defender for Endpoint.

• Manage security team, define and prioritize the tasks. • To identify defensive measures and areas for improvement with MITRE att&ck framework.

• Prepare presentations and communications for the client at the management level. • To handle and analyze the P1/P2 Security Incidents. • Security Incident Management through ServiceNow.

• Presentation of Weekly/Monthly SOC progress report to the Customers/Clients.

• To identify the security gaps and remediate them by Defender for the cloud to minimize the security risk.

• To detect, investigate, respond, and prevent security threats by EDR Solution (MDE).

• Security incident auditing.

• Preparation of Incident response plan. • Point of Contact for all security matters such as Security Inc.

• Experience with email security and phishing simulation tools

• Knowledge of automation (Logic Apps / SOAR playbooks)

• Exposure to vulnerability management tools

• Certifications such as:

• Microsoft SC-200 (Security Operations Analyst)

• Microsoft AZ-500 (Azure Security Engineer)

• Any SOC / Cybersecurity certification

Share Resume On:

[email protected]