SOC Operations Specialist

We are seeking a SOC Operations Specialist to strengthen our cybersecurity defense and response capabilities. The role involves leading threat detection, investigation, and automation efforts using Microsoft Sentinel and Defender XDR . You'll be working closely with cross-functional teams to enhance the organization's overall security posture through advanced analytics, automation, and proactive threat hunting. Key Responsibilities Lead end-to-end threat detection, investigation, and response using Microsoft Sentinel & Defender XDR. Develop and optimize KQL queries , custom analytics rules, dashboards, and automated playbooks. Administer and maintain Sentinel environments , integrations, and connectors. Conduct threat hunting and guide L1/L2 analysts during escalations. Document detection logic, automation workflows, and response procedures . Participate in Red/Blue team exercises and proactive security assessments. Support automation, DevSecOps, and CI/CD for continuous security content deployment. Required Skills & Expertise 6–8 years of hands-on experience in SOC operations or cybersecurity roles. Proficiency in Microsoft Sentinel, Defender XDR, KQL, and SOAR (Logic Apps) . Strong understanding of incident response, MITRE ATT&CK framework , and Azure cloud security . Solid analytical and problem-solving skills with excellent documentation ability. Strong communication and collaboration skills to work in dynamic SOC environments. Preferred Qualifications Certifications such as SC-200 (Microsoft Security Operations Analyst) , SC-100 (Cybersecurity Architect) , or AZ-500 (Azure Security Engineer) are a plus.