Description

You will monitor, analyze, and respond to global security alerts using SIEM and SOAR tools. You own the full incident response lifecycle, from triage and containment to recovery and escalation. You develop automated detection rules and playbooks in Microsoft Sentinel to improve threat detection accuracy and operational efficiency.

Responsibilities

• Monitor and investigate security events using Microsoft Sentinel, implementing containment strategies.
• Develop and manage automated detection rules, playbooks, and workbooks in the Microsoft Sentinel platform.
• Utilize Microsoft Defender and MS Purview DLP to enhance endpoint protection and data loss prevention.
• Conduct proactive threat hunting and data forensics to uncover potential security threats.
• Collaborate with USA Security escalation teams to refine SOC procedures and best practices.

Required Skills

• 5+ years of experience as a SOC analyst, with lead responsibilities preferred.
• Strong proficiency in KQL for querying and analyzing security data.
• Hands-on experience with Microsoft Sentinel, including rule creation and playbook implementation.
• Experience with Microsoft Defender and MS Purview Data Loss Prevention tools.
• Solid understanding of Incident Response, SIEM, and Threat Intelligence.
• Knowledge of Network Security, Data Forensics, and SOC Playbooks.
• Ability to work in rotating 24x7 shift schedules.

Key Skills

Education

Any Graduate