Azure Sentinel Specialist

Key Responsibilities:

1.Design & Implementation:

Integrate Azure Sentinel with on-premises and cloud-based resources for comprehensive threat visibility.

Develop and manage Log Analytics Workspaces and data connectors.

2.Security Monitoring & Threat Detection:

Create and maintain custom rules, alerts, and automation playbooks.

Analyze security events, identify threats, and provide actionable recommendations.

Monitor and manage SIEM dashboards for real-time threat intelligence.

3. Incident Response & Management:

Respond to security incidents and conduct root cause analysis.

Coordinate with stakeholders to mitigate risks and resolve vulnerabilities.

4. Optimization & Automation:

Enhance Sentinel performance by optimizing data ingestion and query performance.

5. Documentation & Reporting:

Develop and maintain documentation for configurations, processes, and incident responses.

Generate detailed reports on security incidents, trends, and recommendations.

Qualifications & Skills:

Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or related field.

Proven experience with Azure Sentinel, Microsoft Defender, and Azure Security tools.

Strong understanding of SIEM platforms and security operations.

Knowledge of KQL (Kusto Query Language) for writing log queries and analytics rules.

Familiarity with threat detection frameworks like MITRE ATT&CK.

• Experience with incident response, threat hunting, and SOC operations.

Key Responsibilities:

1.Design & Implementation:

Integrate Azure Sentinel with on-premises and cloud-based resources for comprehensive threat visibility.

Develop and manage Log Analytics Workspaces and data connectors.

2.Security Monitoring & Threat Detection:

Create and maintain custom rules, alerts, and automation playbooks.

Analyze security events, identify threats, and provide actionable recommendations.

Monitor and manage SIEM dashboards for real-time threat intelligence.

3. Incident Response & Management:

Respond to security incidents and conduct root cause analysis.

Coordinate with stakeholders to mitigate risks and resolve vulnerabilities.

4. Optimization & Automation:

Enhance Sentinel performance by optimizing data ingestion and query performance.

5. Documentation & Reporting:

Develop and maintain documentation for configurations, processes, and incident responses.

Generate detailed reports on security incidents, trends, and recommendations.

Qualifications & Skills:

Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or related field.

Proven experience with Azure Sentinel, Microsoft Defender, and Azure Security tools.

Strong understanding of SIEM platforms and security operations.

Knowledge of KQL (Kusto Query Language) for writing log queries and analytics rules.

Familiarity with threat detection frameworks like MITRE ATT&CK.

• Experience with incident response, threat hunting, and SOC operations.