Description

You will manage security operations, focusing on Azure Sentinel, KQL, and incident response.

This role is hybrid.

Responsibilities

• Deploy and maintain Microsoft Sentinel, Logic Apps, and data connectors.
• Integrate log sources and manage SIEM tool configurations.
• Execute incident response activities and analyze security alerts.
• Monitor network security devices and troubleshoot TCP/IP issues.

Required Skills

• 5+ years of technical experience in Information Security.
• Expertise with Microsoft Sentinel, KQL, and Logic Apps.
• Experience with SIEM tools such as QRadar, Splunk, Logrhythm, or Solarwinds.
• Knowledge of Azure Security, Defender, and XDR platforms.
• Familiarity with IDS/IPS and firewalls (Snort, Cisco, Fortigate, Sourcefire).
• Solid understanding of Windows/Unix architectures and LAN/WAN technologies.
• Familiarity with ITSM/ticketing tools and security best practices.

Preferred Skills

• Certifications: Security+, C|EH, Network+, CISSP, GIAC.
• Experience with Power BI for security reporting.

Key Skills

Education

Any Graduate