Description

Key Skills: Microsoft Sentinel, KQL, Microsoft Defender, MS Purview DLP, Incident Response, SIEM, Threat Intelligence, Network Security, Data Forensics, SOC Playbooks

Good to Have Skills: Vulnerability Management Tools, Sandboxing Technologies, AI/ML Workflows, Threat Hunting, SOAR Tools, Firewalls, IDS/IPS, Network Security Protocols. Certifications such as CISSP, CEH, or CompTIA Security+ are beneficial. Strong analytical and problem-solving skills with ability to work in rotating 24x7 shift schedules.

Roles & Responsibilities:

• Monitor, analyze, and respond to global security alerts using SIEM/SOAR tools for threat detection.
• Investigate and respond to security events, implementing containment and recovery strategies effectively.
• Develop and manage automated detection rules and playbooks in Microsoft Sentinel platform.
• Employ Microsoft Defender and MS Purview Data Loss Prevention tools to enhance endpoint protection.
• Conduct proactive threat hunting and data forensics to uncover potential security threats.
• Utilize advanced threat intelligence platforms to inform and refine threat detection strategies.
• Develop and execute SOC playbooks to improve response and operational efficiency significantly.
• Triage and assist on complex incidents and investigations with escalation teams.
• Collaborate with USA Security escalation teams and departments to enhance overall security posture.
• Assist in developing and refining SOC procedures and best practices for the team.

Experience Required: 5-10 years of experience as a SOC analyst, preferably with lead responsibilities. Strong knowledge of KQL for querying and analyzing security data. Hands-on experience with Microsoft Sentinel, including rule creation, playbook implementation, and workbooks.

Education: Preferred Bachelor's degree in Computer Science, Cybersecurity, or a related field

Key Skills

Education

Any Graduate