Job Title : Azure Cloud Security Engineer Microsoft Sentinel & Defender Experience
- 15–20 Years (Minimum 5 years in Cloud Computing/Cloud Security)
- Minimum 3 years of hands-on experience in Azure Security
- Minimum 2 years of experience in Microsoft Sentinel, Azure Log Analytics, and KQL Primary Skills (Mandatory)
- Microsoft Defender for Cloud
- Microsoft Sentinel
- Kusto Query Language (KQL)
- Azure Cloud Security Primary Responsibilities
- Design and implement Azure Cloud Security architecture.
- Develop and maintain SIEM & SOAR use cases using Microsoft Sentinel.
- Configure Azure Log Analytics and onboard security logs from multiple sources.
- Create and manage playbooks, analytic rules, workbooks, notebooks, and incident response workflows.
- Perform threat hunting, incident investigation, and security monitoring.
- Develop KQL queries for log normalization, parsing, and data ingestion.
- Automate incident response using Azure Logic Apps.
- Integrate SIEM/SOAR use cases into Azure DevOps CI/CD pipelines.
- Develop Jupyter notebooks using Python or other scripting languages for Sentinel integration.
Required Technical Skills
- Microsoft Sentinel administration and implementation
- Azure Log Analytics
- Microsoft Defender for Cloud
- KQL (Kusto Query Language)
- SIEM & SOAR implementation
- Azure Logic Apps
- Azure DevOps CI/CD integration
- Python (Jupyter Notebooks)
- Log collection and connector configuration
- Threat Hunting
- Incident Response
- Security Monitoring
- Azure Security Architecture Log Management & Integration
- Configure built-in and custom Sentinel log connectors.
- Connect on-premises and cloud security logs to Azure Sentinel.
- Experience with:
- Syslog
- RSyslog
- Syslog-ng
- Data normalization and parsing within Log Analytics. Cloud Security Expertise
- Azure Security Architecture
- Microsoft 365 / Office 365 E5 Security Suite
- Microsoft Defender Security Suite
- Azure Identity & Access Security
- Azure Security Best Practices
- Valuable knowledge of AWS & GCP Security (Preferred)