Description

You will serve as a technical expert and strategic advisor focusing on the design, implementation, and optimization of Microsoft Sentinel architectures.

Responsibilities

• Design and deploy Microsoft Sentinel architectures tailored to specific client requirements.
• Integrate cloud, on-premises, and third-party data sources to ensure unified visibility.
• Configure analysis rules, connectors, detection models, watch lists, and automate incident responses using Azure Logic Apps Playbooks.
• Optimize system performance and reduce false positives through continuous rule adjustment.
• Develop scripts using PowerShell, KQL, and Python to automate and validate security processes.

Required Skills

• 5 to 8 years of experience in cybersecurity, with at least 3 years focused on Microsoft Azure security.
• Advanced expertise in Microsoft Sentinel, including KQL, UEBA, threat hunting, and SIEM/SOAR implementation.
• Proficiency in Microsoft Azure security tools such as Defender, Entra ID, IAM, NSG, and Azure Policy.
• Strong scripting skills in KQL, PowerShell, and Python.
• Practical experience in SOC operations, incident response, and SIEM/SOAR deployment.
• Deep understanding of cloud architectures (IaaS, PaaS, SaaS) and hybrid or multi-cloud environments.
• Solid knowledge of networking fundamentals, including TCP/IP, VPN, firewalls, IDS/IPS, and EDR.
• Familiarity with cybersecurity standards such as ISO 27001, NIST, and GDPR.
• Experience in professional services, including leading workshops, client relations, and technical documentation.
• Degree in computer science, cybersecurity, or a related field, or an equivalent mix of cyber certifications.

Preferred Skills

• Microsoft certifications: AZ-500, SC-200, or SC-100.
• Cybersecurity certifications: CISSP, CCSP, or SANs GSEC.

Key Skills

Education

Any Graduate