Role & responsibilities
- Senior Cybersecurity Engineer - Security Incident & Event Management (SIEM) / Data Loss Prevention (DLP)
- General Duties:
- Administer and maintain MS Sentinel SIEM
- Work with owners to ingest logs
- Work with Incident Response with investigations
- Administer and maintain Data Loss Protection program
- Set and refine DLP Policies
- Discover and label CSC Data
- Must have skills:
- MS Sentinel SIEM Administration
- Hands on experience ingesting application security logs and process required to determine which logs should be ingested / filtered / use cases
- Data Loss Prevention
- Hands on experience with working with DLP Policies
- Hands on experience with data discovery and labeling