Specific Skills

- Bachelors degree in Cybersecurity, Computer Science, Information Technology, or related field (or equivalent experience).
- 5+ years of cybersecurity or security operations experience.
- 2+ years administering enterprise SIEM and EDR platforms.
- 2+ years of Microsoft Sentinel administration.
- Experience with Microsoft Defender XDR, Microsoft Defender for Endpoint, Microsoft Defender for Cloud, and Azure security services.
- Robust knowledge of KQL, PowerShell, Python, Azure, networking, and incident response methodologies.

Responsibilities

- Administration and optimization of Microsoft Sentinel (SIEM/SOAR) and Microsoft Defender for Endpoint (EDR).
- Develop and maintain security analytics rules, workbooks, dashboards, and automated response playbooks using Kusto Query Language (KQL) and Azure Logic Apps.
- Threat detection, threat hunting, incident response, malware investigations,



and forensic analysis across cloud and endpoint environments.
- Integrate security logs, threat intelligence, and Microsoft security solutions, including Microsoft Defender XDR, Microsoft Defender for Cloud, and Microsoft Entra ID.
- Develop security automation using PowerShell, Python, and Azure Automation to improve operational efficiency and reduce response times.
- Monitor security posture, investigate high-priority alerts, and lead remediation efforts while ensuring compliance with security frameworks and regulatory requirements.

Disclaimer: This job posting and Location has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.

📌 AZURE Sentinel / EDR Security Lead (India)
🏢 Wimoku
📍 India