Security Engineer - Sentinel ( Incident Response / Monitoring )

Role & responsibilities

• Actively monitoring, analysing & escalating SIEM alerts based on correlation rules,
• Email protection alerts & malware analysis,
• Provide inputs for proactive content fine tuning & use case enablement,
• Active threat hunting on network flow, user behaviour & threat intelligence,
• Phishing email analysis for MFs,
• Raising incidents in Pastebin intel

Preferred candidate profile

▪ Intermediate with Domain Knowledge (Cyber Security), SIEM - Azure Sentinel, SIEM (RSA / Splunk / LogRhythm), Python Scripting, Ability to Comprehend Logs (HTTP, SMTP, Network), Windows Active Directory, Operating systems and servers.

▪ Under Guidance of Threat Hunting.

▪ End to end understanding of all playbooks- Incident Response Playbooks.

▪ Familiar with Organizes Technical Sessions / Talks.