SOC Engineer

Continuously monitor :

• Monitor security alerts and events from various sources, including Microsoft Sentinel, Defender for Endpoint and Defender for Cloud.
• Perform log management : Perform log ingestion, define use cases, and create alerts for critical assets.
• Develop Detection Rules : Create, implement, and fine-tune analytical rules, alerts, and queries in Microsoft Sentinel and Defender to detect security incidents and reduce false positives.
• Behavioral Analytics : Leverage user and entity behavior analytics (UEBA) to identify abnormal activities and enhance detection capabilities.
• Customize Playbooks : Develop and customize automation playbooks in Sentinel and defender to streamline incident response processes and improve efficiency.
• Threat Hunting : Using IOCs and threat intelligence, perform threat hunting across environment.

Incident Response

Testing and Validation

Business Context and Risk Management

Endpoint Detection and Response (EDR)

Skills Required

Incident Response, Log Management, Threat Intelligence