Description

You will own the full incident response lifecycle, from triage and containment to recovery, while monitoring global security alerts.

This role is remote.

Responsibilities

• Monitor and investigate security events using Microsoft Sentinel, implementing containment strategies.
• Develop and manage automated detection rules, playbooks, and workbooks in Microsoft Sentinel.
• Utilize Microsoft Defender and MS Purview DLP to enhance endpoint protection and data loss prevention.
• Conduct proactive threat hunting and data forensics to uncover potential security threats.
• Collaborate with USA Security escalation teams to refine SOC procedures and best practices.

Required Skills

• 5+ years of experience as a SOC analyst, with lead responsibilities preferred.
• Strong proficiency in KQL for querying and analyzing security data.
• Hands-on experience with Microsoft Sentinel, including rule creation and playbook implementation.
• Experience with Microsoft Defender and MS Purview Data Loss Prevention tools.
• Solid understanding of Incident Response, SIEM, and Threat Intelligence.
• Knowledge of Network Security, Data Forensics, and SOC Playbooks.
• Ability to work in rotating 24x7 shift schedules.

Key Skills

Education

Any Graduate