Your role

We are looking for an experiencedSOC L2 Sentinel to join our Identity and Access Management (IAM) team with 6 to 9 years of experience to join our team forPAN India Location. The ideal candidate will be responsible for handling incident response, identifying threats and also work for use case creation. The candidate will act as an escalation point for SOC L1 analysts, manage Sentinel configurations, create KQL-based detections, and support cybersecurity operations across cloud and hybrid environments.
Monitor and investigate security incidents generated by Microsoft Sentinel.
Perform detailed analysis of alerts and incidents escalated by L1 analysts.
Conduct proactive threat hunting using Kusto Query Language (KQL)
Investigate malware, phishing, ransomware, insider threats, and account compromise incidents.Perform log correlation across multiple security tools.
Create and improve detection use cases aligned with MITRE ATTCK.




Develop custom analytics rules and scheduled queries.

Your Profile
Robust expertise in Microsoft Sentinel for security monitoring, incident investigation, and response.
Proficient inlog analysis, searching, and filtering across multiple data sources.
Experience in performingproactive threat hunting using advanced KQL queries.Valuable understanding of the MITRE ATTCK Framework and its application in threat detection and analysis.
Hands-on experience in developing, optimizing, and troubleshootingKusto Query Language (KQL) queries for incident investigation and detection use cases.
Ability to analyze security events, identify threats, and support effective incident response activities.

What you''ll love about working here
You can shape your career with us.
s

📌 Socsentinel Professional Bengaluru
🏢 Capgemini
📍 Bengaluru