Project Role : Security Architect
Project Role Description : Define the cloud security framework and architecture, ensuring it meets the business requirements and performance goals. Document the implementation of the cloud security controls and transition to cloud security-managed operations.
Must have skills : Security Information and Event Management (SIEM)
Good to have skills : NA
Minimum
12 year(s) of experience is required
Educational Qualification : 15 years full time education
Summary:
Proven expertise in designing, deploying, and operationalizing Sentinel environments from the ground up covering data connector integration, log ingestion, analytic rule development, automation (Logic App SOAR), and continuous optimization. Adept at collaborating with cross-functional teams to enhance threat visibility, detection efficiency, and compliance posture across hybrid and multi-cloud infrastructures.
Roles & Responsibilities:
1)Design and implement Microsoft Sentinel architecture, including data connectors, analytics rules, and workbooks.
2)Integrate Sentinel with various data sources, including Azure services on-premises systems, and third-party security products.
3)Develop and maintain data connectors, APIs and custom integrations.
4)Configure and optimize incident response workflows, including automated response actions and playbooks.
5)Collaborate with security operations teams to implement Sentinel-based security monitoring and incident response processes.
6)Provide training and support to security teams on Sentinel features and functionality
7)Continuously monitor and optimize Sentinel performance, scalability, and reliability
8)Develop and maintain custom dashboards, reports, and workbooks to provide security insights and metrics.
9)Integrate Azure Logic Apps with Azure Sentinel to automate security workflows and incident response.
10)Develop custom connectors for Logic apps to integrate with Azure Sentinel and other security tools.
11)Collaborate with security teams, developers, and operation teams to ensure seamless integration and deployment of Logic Apps with Azure Sentinel
12)Configure and maintain Sentinel workspaces, including data connectors, analytics rules.
13)Optimize Sentinel workspace performance, scalability, and security.
14)Develop and maintain reports and dashboards to provide visibility into security metrics and trends.
15)Strong knowledge of KQL and experience writing complex queries.
16) Proficiency in Microsoft Sentinel, Azure Security Center and Azure Monitor
17) Experience with data analytics, machine learning, and threat intelligence.
Professional & Technical Skills:
- Must To Have Skills: Proficiency in Sentinel and Logic App
- Strong understanding of cloud security principles and best practices.
- Experience with security compliance frameworks such as ISO 27001, NIST, or CIS.
- Knowledge of incident response and threat detection methodologies.
- Familiarity with network security protocols and technologies.
Additional Information:
- The candidate should have minimum 12 years of experience in Security Information and Event Management (SIEM).
- This position should be based out of Bangalore and Pune
- A 15 years full time education is required.