Description

You will own the core functions of the Security Operations Center.

Responsibilities

• Monitor and remediate security alerts from Microsoft Sentinel and Defender.
• Develop Sentinel workflows and workbooks to automate responses.
• Conduct investigations using Microsoft Threat Explorer and Advanced Hunting.
• Configure Exchange transport rules for security events.
• Manage Defender Tenant Block/Allow Lists and provide forensic data.

Required Skills

• 3+ years experience with Microsoft Defender for Identity.
• 3+ years experience with Microsoft Active Directory (On-Prem).
• 3+ years experience with Microsoft Entra ID (Azure AD).
• 2+ years experience with Microsoft Sentinel (SIEM & Investigations).
• Experience with Microsoft Active Directory.
• Proficiency in KQL.
• Familiarity with SIEM platforms.

Key Skills

Education

Any Gradute