Description

You will manage security operations, focusing on detection, response, and automation within the Microsoft ecosystem.

This role is on-site.

Responsibilities

• Monitor and remediate security alerts generated by Microsoft Sentinel and Defender.
• Develop and maintain Sentinel workflows and playbooks to automate incident response.
• Conduct forensic investigations using MS Threat Explorer and Advanced Hunting to identify threats.
• Configure Exchange transport rules to address specific security events and manage Defender Tenant Block/Allow lists.

Required Skills

• 5+ years of experience in Security Operations Center (SOC) or incident response.
• Hands-on expertise with Microsoft Sentinel, including KQL query writing.
• Proficiency with Microsoft Defender for Endpoint and Defender for Office 365.
• Experience with Microsoft Active Directory security configurations.
• Ability to design and implement security automation workflows.
• Strong understanding of email security protocols and Exchange transport rules.

Preferred Skills

• BS degree in Computer Science, Information Security, or related field.

Key Skills

Education

Any Gradute