Job Role - Microsoft Sentinel SIEM Engineering – Senior Associate

Location: Hyderabad | Bangalore

Experience: 7 – 16 Years

Qualification: Any Graduate | Any Post Graduate | Any Diploma

Client Facing: Yes – Excellent Communication Skills Required

Role Overview

PwC is looking for an experienced Microsoft Sentinel SIEM Engineer to join its Threat Detection & Response (TDR) Cyber Managed Services team.

The ideal candidate should have strong hands-on experience in Microsoft Sentinel SIEM/SOAR engineering, log source onboarding, detection engineering, KQL, Python automation, and MITRE ATT&CK-based; threat detection.

Mandatory Technical Skills

- Robust hands-on experience in Microsoft Sentinel SIEM & SOAR.
- Experience with Sentinel Automation Rules and Azure Logic Apps Playbooks.
- Strong knowledge of KQL – Analytics Rules, Hunting Queries and Detection Use Cases.
- Experience in log ingestion, onboarding, parsing and event correlation.
- Knowledge of ASIM, Syslog/CEF, Azure Monitor Agent and Data Collection Rules.
- Hands-on experience with Python scripting and API-based automation.
- Understanding of MITRE ATT&CK; Framework and Threat Detection Engineering.
- Experience in SIEM content development,



alert tuning and false-positive reduction.

Good-to-Have Skills

• Google SecOps, Splunk, Splunk SOAR.

• Palo Alto XSIAM / XSOAR.

• Microsoft Defender for Endpoint / Defender XDR.

• CrowdStrike, SentinelOne, Cortex XDR.

• Defender for Office 365, Proofpoint.

• Generative AI integration for security detection and automation.

• Cloud Security Monitoring and Threat Intelligence.

Key Responsibilities

- Develop and maintain SIEM detection rules, correlation rules, alerts and dashboards.
- Design and implement Microsoft Sentinel SOAR playbooks and automation workflows.
- Onboard log sources and improve log parsing and data quality.
- Perform threat hunting, advanced log correlation and incident investigations.
- Develop MITRE ATT&CK-aligned; detection use cases.
- Optimize alerts and reduce false positives.
- Support L3/L4 incident escalations and root cause analysis.

Interested candidates: Share your updated resume.

Email: [email protected]

Call / WhatsApp: +91 (phone hidden)

If I'm unavailable on call, please leave a WhatsApp message, and I'll get back to you.

📌 Microsoft Sentinel SIEM Engineering – Senior Associate (Hyderabad)
🏢 Ipivot
📍 Hyderabad