SOC Engineer

Continuously monitor :

Monitor security alerts and events from various sources, including Microsoft Sentinel, Defender for Endpoint and Defender for Cloud.

Perform log management : Perform log ingestion, define use cases, and create alerts for critical assets.

Develop Detection Rules : Create, implement, and fine-tune analytical rules, alerts, and queries in Microsoft Sentinel and Defender to detect security incidents and reduce false positives.

Behavioral Analytics : Leverage user and entity behavior analytics (UEBA) to identify abnormal activities and enhance detection capabilities.

Customize Playbooks : Develop and customize automation playbooks in Sentinel and defender to streamline incident response processes and improve efficiency.

Threat Hunting : Using IOCs and threat intelligence, perform threat hunting across environment.

Incident Response

Analyze and investigate security incidents to identify potential threats.

Respond promptly to security incidents, provide initial analysis, conduct business impact assessment, isolate, eradicate and recover from threats.

Document and report incidents, ensuring accurate and comprehensive records.

Follow established incident response procedures, playbooks and contribute to their enhancement.

Testing and Validation

Participate in Blue\Red\Purple team exercises.

Participate in Cyber crisis simulations.

Participate in Table-top exercises.

Business Context and Risk Management

Understand the Business value chain.

Understand key Business processes.

Understanding the Business architecture and mapping to crown jewels (critical assets)

Risk management with the ability to conduct risk assessments when required.

Endpoint Detection and Response (EDR)

Manage and maintain endpoint security and compliance.

Perform daily health checks endpoint security and EDR solutions and remediate accordingly.

Conduct regular scans and assessments to identify and mitigate potential vulnerabilities.

Collaborate with IT teams to ensure endpoint security configurations align with organizational standards.