Cyber Security Specialist

We are seeking a skilled and experienced Cyber Security Engineer to join our team.

Job Description

• ">
• Maintain the overall security posture of our organization by implementing, managing and optimizing SIEM solutions such as Microsoft Sentinel.">
• Configure and manage SIEM infrastructure for efficient threat detection and response, ensuring it runs optimally with performance monitoring and issue resolution.">
• Regularly update and optimize SIEM policies, rules and configurations based on evolving threats.">
• Onboard, configure and manage data connectors from various log sources, including cloud, on-premises and hybrid environments.">
• Ensure log ingestion health and troubleshoot data collection issues.">
• Develop, implement and fine-tune analytics rules, detection logic and playbooks in Sentinel.">
• Assist SOC and incident response teams with log analysis, threat correlation and incident investigation.">
• Reduce false positives by refining detection rules and optimizing event filtering.">
• Implement and enhance automation using Kusto Query Language (KQL), Logic Apps and Microsoft Defender XDR integrations.">
• Maintain SIEM compliance with security policies, industry regulations and best practices.">
• Generate reports and dashboards to provide visibility into security posture and SIEM performance.">
• Work with SOC, IT and Cloud Security teams to enhance Sentinel capabilities.">
• Document SIEM configurations, detection use cases and operational procedures.">

Required Skills and Qualifications

• ">
• The candidate must have an Engineering Background in Computer Science, Information Technology, Cybersecurity or related field and a minimum of 8+ years of experience with recent experience in Security engineering, system administration, network engineering, software engineering/development with a focus on Cybersecurity.">
• 8+ years of IT engineering experience with recent experience in building and managing infrastructure and security platforms.">
• 3+ years of Experience implementing, architecting and administering SIEM platforms like Sentinel, Chronicle, Splunk for a large global organization.">
• Knowledge of Azure services and data ingestion from those services into SIEM.">
• Familiarity with MITRE ATT&CK, cyber threat intelligence and SOC Workflows">
• Understanding of SOAR Principles">
• Hands on Experience with Microsoft Azure platform, managing various configurations to enable & manage Sentinel.">
• Experience developing in XML, Bash, Python, and PowerShell scripts.">
• DevOps Engineering experience. (Terraform, SDLC, Actions)">
• Independent, self-motivated, proactive approach to problem solving and prevention.">
• Excellent written and verbal communication skills.">
• Passionate about cyber security and the aptitude to identify and solve security problems.">

Benefits

• ">
• This is a highly rewarding role that will provide opportunities for professional growth and development.">
• You will be working with a talented team of professionals who are passionate about cyber security.">
• We offer a competitive salary and benefits package.">

Others

• ">
• This job description is not intended to be an exhaustive list of responsibilities, and the role may evolve over time.">
• If you are a motivated and experienced individual who is passionate about cyber security, we encourage you to apply for this exciting opportunity.">
• Please note that only shortlisted candidates will be contacted for further assessment.">