Azure Sentinel 04 to 06 Years Mumbai

**Job Description**: - **Good knowledge of SIEM, SIEM Architecture and Hybrid Integrations.** - **Expertise with Azure Sentinel, creating/deploying Analytics Rules, Playbooks, Workbooks, Logic Apps, Log Analytics, Key Vault, IAM, Azure AD, etc** - **Good Knowledge of Azure DevOps & GitHub, Familiarity with GitHub, Jenkins and CI/CD pipelines.** -...

Good knowledge of SIEM, SIEM Architecture and Hybrid Integrations. - Expertise with Azure Sentinel, creating/deploying Analytics Rules, Playbooks, Workbooks, Logic Apps, Log Analytics, Key Vault, IAM, Azure AD, etc - Good Knowledge of Azure DevOps & GitHub, Familiarity with GitHub, Jenkins and CI/CD pipelines. - Experience in Query language such as SQL or...

Strong background developing Azure Sentinel analytics rules, incidents, playbooks, notebooks, workbooks, threat hunting within the Azure Cloud. Strong and demonstrated background working with Log Analytics Workspaces, Kusto Query Language (KQL), Dashboard\workbook development. Strong understanding of Azure PaaS services. - Solid experience with Logic Apps in...

Overview:Seeking a Security Analyst with expertise in Microsoft Sentinel and the Microsoft Defender Suite (EDR, XDR, SIEM, SOAR). Role involves threat detection, incident response, threat hunting, and automation using KQL, PowerShell, Defender for Cloud, Defender for Office 365, MDVM, Copilot for Security, and ServiceNow SecOps SIR for incident tracking and...

4-9 years previous Security Operations Centre L2/L3 support Experience in conducting security investigations.- - Must have Experience on Azure Sentinel.- - Experience with KQL Use case creation and fine tuning and Workbook development.- - Experience on tools such as SIEM EDR Firewall IDS IPS Vulnerability Management Web Filtering etc- - Experience on...

Role & responsibilities :We are seeking a skilled and proactive Microsoft Sentinel Platform Engineer to lead the design, implementation, and management of Microsoft Sentinel across enterprise-scale environments. The ideal candidate will possess strong expertise in KQL, incident response, client engagement, and multi-tenant Azure environments. This role...

Provide superior technical security expertise to ensure that the Security Operations Centre SOC is always delivering a professional service to its customers - Conduct detailed analytical queries and investigations identify areas that require specific attention identify indicators of compromise IOC or events of interest EOI that need further investigation and...

**SIEM maintenance**: Content finetuning (use-cases, hunting queries, playbooks, workbooks etc.) Log flow monitoring and anomaly detection **Onboarding of customers**: Participate in creation of a customer onboarding plan Connecting data sources to Sentinel and validating them with customers Creating content for those data sources SIEM content...

Must have: SIEM/Sentinel - strong experience in implementation of MS Sentinel, log source integration, logic apps, use case management - Expert knowledge in SOC Implementation Services, Incident response, and Microsoft Defender for Cloud. - Strong knowledge in SOAR EUBA. - Working knowledge of ITSM tools, ServiceNow preferred. - Ability to onboard new log...

**SIEM monitoring.** - Monitor incoming alerts - Monitor SIEM health - Monitor incoming SIEM tickets **Alert Investigation & Reporting** - Provide initial triage for all SIEM alerts - Escalate alert to L2 when approrpiate and as indicated by SOP - Collect and include any relevant evidence for escalated alerts. This includes investigation steps already done,...