01Overview
This role is for you if you have the below
Educational qualifications
Bachelors degree in Information Technology or a related discipline (or
equivalent work experience).
Work experience
4+ years of experience working in an engineering role.
3+ years of handson experience with one or more SIEM/SOAR platforms:
Microsoft Sentinel
Azure Log Analytics
Google Chronicle
Siemplify
Experience in end-to-end execution of MDR projects including planning,
onboarding, delivery, and transition to steady state.
Experience working in a shared service model supporting multiple clients for
SIEM/SOAR use cases, Logic Apps, workbooks, and PowerBI reports.
Strong experience with:
Azure Log Analytics Workspaces
Kusto Query Language (KQL)
Logic Apps
Workbooks & dashboard development
Cloud security & networking concepts
Experience with Azure DevOps toolset (Pipelines, Boards, Repos, Agent Pools).
Experience with scalable SIEM/SOAR deployments.
The ideal candidate will:
Support execution of client onboarding, implementation, and steadystate
support.
Work across multiple clients to deliver SIEM/SOAR use cases, Logic Apps, custom
workbooks, and PowerBI dashboards.
Have hands-on exposure to Microsoft Sentinel or Google Chronicle/SecOps.
Build analytics rules, automation playbooks, notebooks, incidents, and KQL
queries.
Possess robust understanding of Azure architecture including Azure AD, B2B,
authentication patterns, Azure Lighthouse.
Configure, automate, harden, and deploy Microsoft Sentinel services at scale.
Integrate current technologies (e.g., Microsoft Defender for Endpoint,
SentinelOne).
Work with CI/CD, infrastructure as code (ARM templates), configuration
management, and agile engineering practices.
Demonstrate strong engineering mindset and cybersecurity domain knowledge.
Work efficiently in fast-paced delivery environments. .
