SIEM Engineering & Detection and Integration:
Develop and optimize detection rules and use cases in Azure Sentinel and Microsoft Defender for Endpoint.
Analyze security logs to identify threats and vulnerabilities, fine-tuning alerts for improved accuracy.
Write KQL queries to detect malicious activity across cloud and endpoint environments.
Incident Investigation & Response:
Provide advanced support to SOC L1/L2 teams in triaging complex security incidents.
Collaborate with the IR team to contain and remediate security threats.
Participate in proactive threat hunting to enhance detection capabilities.
Security Tools Management:
Configure and manage Defender for Endpoint, Azure Sentinel, and related security tools to improve threat detection.
Implement additional Azure security tools to enhance detection coverage.
Threat Intelligence Integration:
Integrate threat intelligence feeds to enhance detection of APTs and targeted attacks.
Stay updated on emerging threats, integrating current intelligence into detection strategies.
Collaboration & Reporting:
Collaborate with security teams to improve detection and response processes.
Document and report on detection efforts, threat analysis, and incident response activities.
Continuous Improvement:
Mentor and train SOC L1/L2 analysts on advanced detection techniques and use cases for Azure Sentinel and Microsoft Defender for Endpoint.
knowledge about security trends, attack vectors, and best practices within the SOC.
Apply Now
📌 Senior Consultant-SOC-SIEM Engineering (India)
🏢 Aujas
📍 India
Reply to this offer
Impress this employer describing Your skills and abilities, fill out the form below and leave Your personal touch in the presentation letter.