Description

Key Skills: AWS, Microsoft Defender, AI Security, Sentinel, SIEM, Powershell, Incident Response

Roles and Responsibilities:

• Investigate AWS security alerts, suspicious activity, and cloud misconfigurations using native AWS logs and security services.
• Monitor and tune detections in Microsoft Sentinel and related SIEM workflows to improve alert quality and reduce false positives.
• Handle EDR/XDR alerts in Microsoft Defender XDR, including endpoint triage, IOC validation, containment support, and remediation coordination.
• Support AI security monitoring by identifying misuse scenarios, data leakage risks, prompt injection concerns, and operational guardrails.
• Document incident timelines, findings, containment actions, and lessons learned while contributing to runbooks, dashboards, and detection improvements.

Skills Required:

• 5-7 years of experience in SOC operations, incident response, cloud security, SIEM engineering, or EDR/XDR operations.
• Hands-on experience with AWS security services and cloud investigation workflows.
• Strong working knowledge of Microsoft Sentinel, Microsoft Defender XDR, and SIEM-based alert investigation.
• Ability to analyze logs, correlate events, and support incident response across cloud and endpoint environments.
• Practical scripting or query capability using KQL, PowerShell, or Python for investigation and operational support.

Good to Have:

• Microsoft Security Copilot, SOAR platforms, threat intelligence workflows, and cloud security certifications.

Education:  B.E. in Computer Science or equivalent technical degree

Key Skills

Education

Any Graduate