Senior Consultant-SOC L3-SIEM Engineering

Location: Mumbai/Bangalore/Gurgaon

Category: MDR

Job Id: 20250306

Job description

SIEM Engineering & Detection and Integration

Develop and optimize detection rules and use cases in Azure Sentinel and Microsoft Defender for Endpoint.

Analyze security logs to identify threats and vulnerabilities, fine-tuning alerts for improved accuracy.

Write KQL queries to detect malicious activity across cloud and endpoint environments.

Incident Investigation & Response

Provide advanced support to SOC L1/L2 teams in triaging complex security incidents.

Collaborate with the IR team to contain and remediate security threats.

Participate in proactive threat hunting to enhance detection capabilities.

Security Tools Management

Configure and manage Defender for Endpoint, Azure Sentinel, and related security tools to improve threat detection.

Implement additional Azure security tools to enhance detection coverage.

Threat Intelligence Integration

Integrate threat intelligence feeds to enhance detection of APTs and targeted attacks.

Stay updated on emerging threats, integrating new intelligence into detection strategies.

Collaboration & Reporting

Collaborate with security teams to improve detection and response processes.

Document and report on detection efforts, threat analysis, and incident response activities.

Continuous Improvement

Mentor and train SOC L1/L2 analysts on advanced detection techniques and use cases for Azure Sentinel and Microsoft Defender for Endpoint.

knowledge about security trends, attack vectors, and best practices within the SOC.

Apply Now