SIEM Sentinel

Job description Strong hands-on experience with Azure Sentinel and Microsoft Defender for O365. Understanding of security events and situations in Azure Sentinel and MS defender. Understanding of sentinel services, SOAR and implementing. Identifying potential threats and performing enhancements to existing cyber security measures as per specifications or policy guidelines. Hands on experience working in 247 SOC operations, handling security alerts, Incident triage and investigation, providing SOC Tier 2 support. Good understanding of Cyber security, EDR, Phishing analysis etc. Responsibilities include cyber threat analysis support and recommending appropriate remediation and mitigation. Oversees and coordinates 247 security operations within an organization. Deep expertise in delivering security operations from a MSSP. Manage personnel/staffing, budget, shift scheduling and technology strategy to meet SLAs. Serves as organizational point person for business-critical incidents. Strong understanding of the SOC KPIs, establish SOC performance goals and priorities. Manages security teams, monitors threat, implements security policies, and collaborates with other departments to ensure a comprehensive security posture. Suggests detective and preventive controls to the organizations in helping them become cyber aware, has knowledge of the latest cybersecurity trends. Understanding of the cybersecurity framework such as NIST, MITRE ATT&CK(attack lifecycle management). Tools/Skills: Log Analysis, Incident Response, Incident Handler, Shift Lead, Azure Sentinel, Defender for O365 Certifications(Good to have): CISSP,GCIH,MS Certifications AZ-900 and SC-200 / AZ-500 etc .