Azure Sentinel

Summary

We are seeking a skilled Azure Sentinel SIEM (Security Information and Event Management) Administrator to join our team. As an Azure Sentinel SIEM Administrator, you will be responsible for configuring, managing, and maintaining our Azure Sentinel environment to ensure effective monitoring, detection, and response to security incidents.

Required Skills: 10+ years experience with Azure Sentinel, SIEM

Responsibilities

Configure and deploy Azure Sentinel to meet organizational security requirements

Customize Azure Sentinel workbooks, queries, dashboards, and alerts based on security needs

Integrate data sources with Azure Sentinel for comprehensive log collection and analysis

Design, Develop and implement security use cases and playbooks to automate incident response processes

Collaborate with security analysts and engineers to refine detection rules and improve threat detection capabilities

Conduct regular audits and assessments of Azure Sentinel configurations to ensure compliance with security standards and best practices

Create documentation and run books for operationalization of the platform

Requirements

Bachelors degree in Computer Science, Information Technology, or a related field

Proven experience as a system administrator or security analyst, with specific experience in deploying and managing Azure Sentinel

In-depth knowledge of Azure services, particularly Azure Sentinel, Azure Monitor, Log Analytics, and Azure Security Center

Strong understanding of security principles, threat detection techniques, and incident response procedures

Proficiency in scripting and automation using PowerShell or Python.

Familiarity with common security frameworks and regulations such as CIS Controls, NIST, GDPR, and HIPAA

Excellent analytical and problem-solving skills, with the ability to troubleshoot complex technical issues.

Effective communication and interpersonal skills, with the ability to collaborate with cross-functional teams

Certifications such as Microsoft Certified: Azure Security Engineer Associate