Role & responsibilities
SIEM and Log Onboarding
Design, implement, and manage log onboarding for a wide range of sources (firewalls, cloud services, EDR, etc.)
Create advanced detection use cases in SIEM platforms (e.g., Microsoft Sentinel).
Develop and optimize Kusto Query Language (KQL) queries for threat detection and hunting.
SOAR Integration and Automation
Design and deploy automated workflows to streamline triage, containment, and response using SOAR platforms (e.g., Palo Alto XSOAR, Microsoft Sentinel SOAR).
Maintain and enhance playbooks and integrations for alert enrichment, ticketing, and incident response.
Endpoint and Extended Detection & Response
Configure and manage EDR/XDR tools (e.g., CrowdStrike, Microsoft Defender XDR).
Analyze endpoint telemetry to detect and respond to sophisticated threats.
Cloud Security & Azure Expertise
Implement cloud-native security controls across Microsoft Azure.
Apply Azure security best practices including RBAC, NSGs, Key Vault, Defender for Cloud, and Azure Policies.

📌 Siem Sentinel Engineer Hyderabad
🏢 PwC
📍 Hyderabad