Design, configure, and implement Azure Sentinel from Scratch for an organization to build fully functional Security Operation Center.
Develop and maintain SIEM (Security Information and Event Management) rules, alerts, dashboards, and reports to monitor security events effectively.
Develop and maintain advanced correlation rules, alert logic, and detection mechanisms to enhance the efficiency and accuracy of threat detection.
Hands on SOAR (Security Orchestration, Automation, and Response) integration. Must have multiple created Playbook and workbooks in SOAR.
Collaborate with cross-functional teams to integrate various data sources into Azure Sentinel.
Well versed in Logic App's Integration, Azure functions and Blob Storages.
Conduct regular reviews and updates to ensure the accuracy and effectiveness of security policies and procedures.
Investigate and respond to security incidents, conduct root cause analysis, and recommend appropriate solutions.
Proactively identify and mitigate potential security risks and vulnerabilities in the Azure environment.
Good Knowledge of Automation with ML, Cloud Access Security Broker, Data Leakage Prevention, Web Application Firewall, Multi Factor Authentication, Data Rights Management, Identity Access/Privileged Access Management.
Deep understanding of either MITRE Attack framework (MITRE preferred) or the Cyber Kill Chain
Stay up to date with the latest cybersecurity trends, threats, and best practices to continually improve the security posture.
