Detection Security Engineer (Microsoft Sentinel and Defender Specialist)

Finapinc

We are seeking a highly skilled Detection Security Engineer with expertise in Microsoft Sentinel, Defender, and related security technologies. The ideal candidate will possess strong analytical and technical skills, demonstrating the ability to manage, optimize, and enhance our organization's security infrastructure while ensuring incident detection and response capabilities.

________________________________________

Key Responsibilities:

1. Log and Incident Management:

o Review logs for suspicious activity and implement suppression rules for incoming logs and incidents.

o Analyze security breaches to determine root causes and implement mitigation strategies.

o Organize and prioritize incident queues for effective incident management under a 24/7 SLA.

2. KQL and Data Analysis:

o Develop advanced KQL (Kusto Query Language) queries for threat hunting and analytics.

o Create and manage Workbooks for data visualization and insights.

3. Automation and Playbooks:

o Design and implement Automation Rules and Playbooks to streamline incident response processes.

o Continuously update incident response plans, threat vulnerability management strategies, and automation rules.

4. Microsoft Security Stack:

o Configure and administer Microsoft SIEM solutions, including Azure Sentinel, Microsoft 365 Defender, Microsoft Defender for Identity, Endpoint Manager, and Defender for Cloud Apps.

o Manage devices, apply security policies, and create configuration profiles.

o Design and enforce conditional access policies and oversee OS/software upgrades using MEM.

5. Incident Response and Mitigation:

o Quickly analyze incident details (., affected systems, logs, files, IP addresses, domains, user accounts).

o Perform both automated and manual containment and mitigation activities.

o Provide technical support and troubleshooting for customers using Microsoft Security Stack.

6. Threat Intelligence and Mitigation:

o Utilize MITRE ATT&CK, MISP, and TAXII for threat intelligence and integration

• Experience

  2 - 5 Years

• No. of Openings

  2

• Education

  B.C.A, B.Sc, B.Tech, Post Graduate Diploma, M.C.A, M.Sc, M.Tech

• Role

  Detection Security Engineer

• Industry Type

  IT-Hardware & Networking / IT-Software / Software Services

• Gender

  [ Male / Female ]

• Job Country

  India

• Type of Job

  Full Time

• Work Location Type

  Work from Home