Description

You will design, implement, and optimize Microsoft Sentinel architectures to protect cloud and hybrid environments.

Responsibilities

• Design and deploy Microsoft Sentinel architectures tailored to specific customer requirements.
• Integrate cloud, on-premises, and third-party data sources to ensure unified visibility.
• Configure analysis rules, connectors, detection models, and watch lists while optimizing performance to reduce false positives.
• Automate incident responses using Azure Logic Apps Playbooks.
• Develop scripts in PowerShell, KQL, and Python to automate and validate security processes.
• Lead technical workshops, collaborate with customer teams, and act as the Subject Matter Expert for Sentinel projects.

Required Skills

• 5 to 8 years of experience in cybersecurity, including at least 3 years focused on Microsoft Azure security.
• Advanced expertise in Microsoft Sentinel (SIEM/SOAR, KQL, UEBA, playbooks, and threat hunting).
• Proficiency in Microsoft Azure security tools including Defender, Entra ID (Azure AD), IAM, NSG, and Azure Policy.
• Strong scripting skills in KQL, PowerShell, and Python.
• Hands-on experience with SIEM/SOAR implementation, SOC operations, and incident response.
• Solid understanding of cloud architectures (IaaS, PaaS, SaaS) and hybrid/multi-cloud environments.
• Knowledge of networking fundamentals (TCP/IP, VPN, firewalls, IDS/IPS, EDR) and security standards (ISO 27001, NIST, GDPR).
• Experience in professional services, including customer relations, documentation, and technical presentations.
• Degree in computer science, cybersecurity, or equivalent experience/certifications.

Preferred Skills

• Microsoft certifications: AZ-500, SC-200, or SC-100.
• Cybersecurity certifications: CISSP, CCSP, or SANs GSEC.

Key Skills

Education

Degree in computer science, cybersecurity