Azure Sentinel Engineer

• Configure, manage, and maintain Azure Sentinel to ensure optimal performance and reliability, with continuous monitoring for performance improvements and potential issues.

Set up and fine-tune data connectors to ensure accurate and timely data ingestion.

• Develop and optimize analytic rules, playbooks, and workbooks to enhance threat detection and response capabilities, using Kusto Query Language (KQL) for complex queries and data analysis to support incident investigations.
• Ensure seamless integration of Azure Sentinel with other security tools and platforms, independently handling new integrations and data sources to maintain smooth functionality.
• Manage and automate workflows using Azure Logic Apps and Azure Functions to streamline security operations and enhance efficiency.
• Maintain and optimize log management processes for improved performance and accuracy, ensuring proper data processing and storage.

Primary Skills:

• KQL
• Azure Sentinel Admin