SOC Engineer

Continuously monitor :

• Monitor security alerts and events from various sources, including Microsoft Sentinel, Defender for Endpoint and Defender for Cloud.
• Perform log management : Perform log ingestion, define use cases, and create alerts for critical assets.
• Develop Detection Rules : Create, implement, and fine-tune analytical rules, alerts, and queries in Microsoft Sentinel and Defender to detect security incidents and reduce false positives.
• Behavioral Analytics : Leverage user and entity behavior analytics (UEBA) to identify abnormal activities and enhance detection capabilities.
• Customize Playbooks : Develop and customize automation playbooks in Sentinel and defender to streamline incident response processes and improve efficiency.
• Threat Hunting : Using IOCs and threat intelligence, perform threat hunting across environment.

Incident Response

Testing and Validation

Business Context and Risk Management

Endpoint Detection and Response (EDR)