Microsoft Sentinel SIEM Engineer

18 hours ago

Bengaluru, Karnataka, India Deloitte Consulting Full time ₹ 20,00,000 - ₹ 25,00,000 per year

Role & responsibilities

We are looking for a skilled Microsoft Sentinel SIEM Engineer to join our Cybersecurity Operations team. The ideal candidate will be responsible for the deployment, configuration, integration, and operational support of Microsoft Sentinel as a core SIEM platform, ensuring efficient threat detection, incident response, and security monitoring.

Key Responsibilities:

  • Design, implement, and manage Microsoft Sentinel for enterprise security monitoring.
  • Develop and maintain analytic rules (KQL-based) and detection use cases aligned with MITRE ATT&CK.
  • Integrate various log sources (on-prem and cloud) including Microsoft 365, Azure, AWS, endpoints, firewalls, etc.
  • Create and manage playbooks using Azure Logic Apps for automated incident response.
  • Monitor data connectors and ensure log ingestion health and optimization.
  • Conduct threat hunting and deep dive analysis using Kusto Query Language (KQL).
  • Optimize performance, cost, and retention policies in Sentinel and Log Analytics workspace.
  • Collaborate with SOC analysts, incident responders, and threat intelligence teams.
  • Participate in use case development, testing, and fine-tuning of alert rules to reduce false positives.
  • Support compliance and audit requirements by producing relevant reports and documentation.

Required Skills & Qualifications:

  • 3+ years of experience working with Microsoft Sentinel SIEM.
  • Strong hands-on experience with KQL (Kusto Query Language).
  • Solid understanding of log ingestion from different sources including Azure, O365, Defender, firewalls, and servers.
  • Experience with Azure Logic Apps for playbook creation and automation.
  • Familiarity with incident response workflows and threat detection methodologies.
  • Knowledge of security frameworks such as MITRE ATT&CK, NIST, or ISO 27001.
  • Microsoft certifications such as SC-200 (Microsoft Security Operations Analyst) or AZ-500 are preferred.

Good to Have:

  • Experience with Defender for Endpoint, Defender for Cloud, Microsoft Purview.
  • Knowledge of other SIEM platforms (e.g., Splunk, QRadar) for hybrid environments.
  • Scripting experience (PowerShell, Python) for automation and integration.

Certifications (Preferred but not mandatory):

  • SC-200: Microsoft Security Operations Analyst
  • AZ-500: Microsoft Azure Security Technologies
  • CEH, CompTIA Security+, or equivalent

  • Microsoft Sentinel Administrator

    2 weeks ago

    Bengaluru, Karnataka, India Connect2Talent Full time

    Position : SIEM MS Sentinel AdministratorLocation : Onsite Bengaluru, Karnataka, IndiaJob Type : PayrollDuration : Long-termJob Summary :We are seeking a highly skilled SIEM MS Sentinel Administrator with 6+ years of hands-on experience in security monitoring, administration, and operations. The ideal candidate will be responsible for ensuring smooth...

  • SIEM Sentinel Administrator

    1 week ago

    Bengaluru, Karnataka, India Gig Consultants Full time

    Responsibilities :- He/she should be having 6+ years of experience in below given fields,- Monitor the host reporting status and raise internal support ticket in case of Non-Reporting of any host.- Troubleshoot host non-reporting issue and resolve it. Perform remediation for non-compliance sentinel agents- Worked in Cyber Security team and SIEM.- Fine-tuned...

  • Csa Siem Admin

    3 weeks ago

    Bengaluru, Karnataka, India Deutsche Bank Full time

    Job Title CSA SIEM Admin Sentinel Corporate Title Assistant Vice PresidentLocation Bangalore IndiaRole DescriptionThe COO Chief Information Security Office CISO is responsible for addressing information security risks to the Deutsche Bank global IT as a Security Engineer-AVP you will play a key technical role in our SIEM Operations team within the...

  • SIEM Security Analyst Lead

    2 weeks ago

    Bengaluru, Karnataka, India beBeeSentinel Full time ₹ 20,00,000 - ₹ 25,00,000

    Job OverviewWe are seeking an experienced SIEM Security Analyst Lead with 6+ years of experience in security monitoring, SIEM administration, and Microsoft Sentinel. The ideal candidate will have hands-on expertise in managing Sentinel environments, fine-tuning alerts, troubleshooting host non-reporting, and ensuring overall SIEM health.The role involves...

  • USI - FY26 - Cyber Defense & Resilience - SIEM (Azure Sentinel) - SA

    5 days ago

    Bengaluru, Karnataka, India Deloitte Full time ₹ 1,80,000 - ₹ 2,40,000 per year

    CyberDeloitte Cyber understands the unique challenges and opportunities businesses face in cybersecurity. Join our team to deliver powerful insights to help our clients navigate the ever-changing threat design, and technology as we partner with clients to transform finance.Position SummaryLevel: Solution AdvisorWork you'll do:As a Consultant, you will be...

  • SIEM Integration Architect

    2 weeks ago

    Bengaluru, Karnataka, India Unisys Full time US$ 1,25,000 - US$ 1,75,000 per year

    What Success Looks Like In This RoleLead the integration of alarm/data feeds from multiple SIEM platforms (e.g., Splunk, LogRhythm, Securonix) into Microsoft Sentinel.Configure and manage Cribl pipelines to collect, filter, transform, and enrich raw data before forwarding to Sentinel.Design and implement data normalization strategies to ensure consistent...

  • Microsoft Security Engineer

    2 weeks ago

    Bengaluru, Karnataka, India HireFlex Full time ₹ 9,00,000 - ₹ 12,00,000 per year

    Microsoft Security Engineer – Defender XDR & Sentinel (Azure)Location: Kerala or Bangalore (In-person, Full-time)Experience: 3+ years in IT (Security & Cloud)Company OverviewHireFlex is a global company specializing in providing professional services including Recruitment as a Service, Engineering as a Service, Data Analytics as a Service, DevOps as a...

  • Cybersecurity SIEM Specialist

    1 week ago

    Bengaluru, Karnataka, India beBeeSentinel Full time ₹ 80,00,000 - ₹ 1,00,00,000

    SIEM Sentinel Administrator Job OpportunityWe are seeking an experienced professional to assume a pivotal role as SIEM Sentinel Administrator.Key Responsibilities:Host Reporting Status Monitoring and Support Ticket ManagementTroubleshooting Host Non-Reporting Issues and ResolutionSentinel Component Health Checks and Compliance RemediationTicket and Issue...

  • SIEM Security Operations Specialist

    1 week ago

    Bengaluru, Karnataka, India beBeeSecurity Full time ₹ 1,50,00,000 - ₹ 2,50,00,000

    Job Overview:Are you a seasoned security expert looking to take your career to the next level? We are seeking an experienced SIEM MS Sentinel Administrator with 6+ years of experience in security monitoring, SIEM administration, and Microsoft Sentinel.Key Responsibilities:Monitor host reporting status and raise support tickets for non-reporting hosts to...

  • Cyber Security Engineer

    2 weeks ago

    Bengaluru, Karnataka, India Futurism Technologies, INC. Full time

    Urgent Hiring for Cyber security engineerL3share cv on vaishnavin@futurismtechnologies.comJob DescriptionJob Title: Cyber Security Engineer L3Job Location: Hinjewadi Phase-1, Pune (WFO)Experience: 8+ YearsShift: Rotational Shift (5 Days Working)Qualification: BE, BTechJob Description:We are seeking a highly skilled and experienced Azure Sentinel SIEM & XDR...