Source description
About the role
- Strong hands-on experience with Azure Sentinel and Microsoft Defender for O365. - Understanding of security events and situations in Azure Sentinel and MS defender. - Understanding of sentinel services, SOAR and implementing. - Identifying potential threats and performing enhancements to existing cyber security measures as per specifications or policy guidelines. - Hands on experience working in 247 SOC operations, handling security alerts, Incident triage and investigation, providing SOC Tier 2 support. - Good understanding of Cyber security, EDR, Phishing analysis etc. - Responsibilities include cyber threat analysis support and recommending appropriate remediation and mitigation. - Oversees and coordinates 247 security operations within an organization. - Deep expertise in delivering security operations from a MSSP. - Manage personnel/staffing, budget, shift scheduling and technology strategy to meet SLAs. - Serves as organizational point person for business-critical incidents. - Strong understanding of the SOC KPIs, establish SOC performance goals and priorities. - Manages security teams, monitors threat, implements security policies, and collaborates with other departments to ensure a comprehensive security posture. - Suggests detective and preventive controls to the organizations in helping them become cyber aware, has knowledge of the latest cybersecurity trends. - Understanding of the cybersecurity framework such as NIST, MITRE ATT&CK;(attack lifecycle management). Tools/Skills: Log Analysis, Incident Response, Incident Handler, Shift Lead, Azure Sentinel, Defender for O365 Certifications(Valuable to have): CISSP,GCIH,MS Certifications AZ-900 and SC-200 / AZ-500 etc .
More at Coforge