Job Description
About the RoleYou would be part of the Cyber Security Operations Center (SOC) team with an operational role to detect, prevent, and respond to cyber-attacks. This is a hands-on technical cyber security role with expertise in Security Operations Center and incident response and in the areas of endpoint security, application security, network security or Cloud security.Role and ResponsibilitiesHighly proficient with Azure Sentinel and Azure Log Analytics; focusing primarily on SIEM (security information and event manager) and SOAR(security orchestration automated response) use case development and data collection utilizing the Azure Sentinel and Azure Log Analytics toolsets.Demonstrated background developing analytics rules, incidents, playbooks, notebooks, workbooks, threat hunting and developing KQL queries for data normalization and parsing capabilities within Log Analytics' data ingestion pipeline.
Responsibilities + Skills
Education
Strong understanding of Cloud Security and Networking Concepts and practices. Possess expert knowledge of a Security Operations Centre (SOC) - Operations
Experience
3+ years of experience working in an Azure engineering role; 1+ years of experience working with Azure Sentinel and Azure Log Analytics