Job Role
- Microsoft Sentinel SIEM Engineering – Senior Associate
Location:
Hyderabad | Bangalore
Experience:
7 – 16 Years Qualification: Any Graduate | Any Post Graduate | Any Diploma Client Facing: Yes – Excellent Communication Skills Required Role Overview PwC is looking for an experienced Microsoft Sentinel SIEM Engineer to join its Threat Detection & Response (TDR) Cyber Managed Services team. The ideal candidate should have robust hands-on experience in Microsoft Sentinel SIEM/SOAR engineering, log source onboarding, detection engineering, KQL, Python automation, and MITRE ATT&CK-based; threat detection. Mandatory Technical Skills
• Strong hands-on experience in Microsoft Sentinel SIEM & SOAR.
• Experience with Sentinel Automation Rules and Azure Logic Apps Playbooks.
• Strong knowledge of KQL – Analytics Rules, Hunting Queries and Detection Use Cases.
• Experience in log ingestion, onboarding, parsing and event correlation.
• Knowledge of ASIM, Syslog/CEF, Azure Monitor Agent and Data Collection Rules.
• Hands-on experience with Python scripting and API-based automation.
• Understanding of MITRE ATT&CK; Framework and Threat Detection Engineering.
• Experience in SIEM content development,
alert tuning and false-positive reduction. Good-to-Have Skills
• Google SecOps, Splunk, Splunk SOAR.
• Palo Alto XSIAM / XSOAR.
• Microsoft Defender for Endpoint / Defender XDR.
• CrowdStrike, SentinelOne, Cortex XDR.
• Defender for Office 365, Proofpoint.
• Generative AI integration for security detection and automation.
• Cloud Security Monitoring and Threat Intelligence.
Key Responsibilities
• Develop and maintain SIEM detection rules, correlation rules, alerts and dashboards.
• Design and implement Microsoft Sentinel SOAR playbooks and automation workflows.
• Onboard log sources and improve log parsing and data quality.
• Perform threat hunting, advanced log correlation and incident investigations.
• Develop MITRE ATT&CK-aligned; detection use cases.
• Optimize alerts and reduce false positives.
• Support L3/L4 incident escalations and root cause analysis. Interested candidates: Share your updated resume. Email:
[email protected] Call / WhatsApp: +91 (phone hidden) If I'm unavailable on call, please leave a WhatsApp message, and I'll get back to you.
📌 Microsoft Sentinel SIEM Engineering – Senior Associate (Hyderabad)
🏢 Ipivot
📍 Hyderabad