Defender for cloud apps Jobs

Senior Administrator - Security Investigations, SIEM
HCLTech —Chennai, Tamil Nadu
- Azure
- Windows
- AWS
6d
L3 SOC Analyst / Incident Response Analyst
ProArch —Hyderabad, Telangana
- Full-time
- Remote
- Computer Science
- Microsoft Office
- Analysis skills
- Flexible schedule
Quick apply
Azure Infra AI Operations & Platform Engineer
Bosch Group —Bengaluru, Karnataka
- Full-time
- Azure
- B.Sc
- DevOps
Quick apply
11d
SeniorAdministrator - IAM Operations
HCLTech —Pune, Maharashtra
- Microsoft Access
- Azure
- AWS
4d
SharePoint Lead + Scrum Master - Tieto tech Consulting (m/f/d)
Tietoevry —Bengaluru, Karnataka
- Full-time
- Azure
- Analysis skills
- Project management
IT Security Analyst
AMINA Group —Mumbai, Maharashtra
- Azure
- Financial services
- Communication skills
Quick apply
Senior Tech Specialist, Digital Workplaces – R01566584
Brillio —Bengaluru, Karnataka
- Microsoft Access
- Azure
- Windows
22h
M365 Security Engineer
Halma India Private Limited —Bengaluru, Karnataka
- Full-time
- Azure
- Microsoft Outlook
- Computer Science
Quick apply
Principal Consultant, Secure Microsoft 365 Collaboration and AI
CrucialLogics Inc. —Remote
- Full-time
- Remote
- Azure
- Computer Science
- SQL
Quick apply
Security Automation Engineer
ProArch —Bengaluru, Karnataka
- Full-time
- Remote
- Computer Science
- Microsoft Office
- Analysis skills
- Flexible schedule
Quick apply
Senior Technical Analyst - Endpoint Security
Computacenter —Bengaluru, Karnataka
- Microsoft Office
- Analysis skills
- Communication skills
Lead Administrator (Support &Operations)
HCLTech —Chennai, Tamil Nadu
- Azure
- AWS
- Analysis skills
8d
Asst. Manager Application & Product Security (DevSecOps & AI Security)
Grant Thornton INDUS —Bengaluru, Karnataka
- Analysis skills
- SharePoint
- AI
M&A Integration-M&A M365 Security-On Contract
Grant Thornton INDUS —Kolkata, West Bengal
- Computer Science
- Microsoft Office
- Master's degree
Senior Security Engineer, Managed Microsoft Sentinel
Cyderes —Bengaluru, Karnataka
- Full-time
- Hybrid work
- Azure
- Computer Science
- Windows
- Health insurance
- Paid time off
Quick apply
Project Manager
Paramount Assure —Remote
- Full-time
- Remote
- Azure
- Microsoft Office
- Project management
1d
Security Architect
INOPTRA DIGITAL —Unknown, Karnataka
- Spanish
- Azure
- English
Quick apply
Track Lead - Security Investigations, SIEM
HCLTech —Bengaluru, Karnataka
- Azure
- AWS
- APIs
4d
Security Operations Manager
Sun Pharmaceutical Industries Ltd —Mumbai, Maharashtra
- Azure
- Computer Science
- Master's degree
Lead Security Engineer - Workspace
Envestnet Asset Management, Inc —Thiruvananthapuram, Kerala
- Hybrid work
- Windows
- Scripting
- Linux
- Health insurance
14d

I want to receive the latest job alerts for defender for cloud apps

By signing in to your account, you agree to SimplyHired's Terms of Service and consent to our Cookie and Privacy Policy.

Explore jobs in more locations

defender for cloud apps jobs near

Soc Analyst jobs in Hyderabad, Telangana

Automation Engineer jobs in Bengaluru, Karnataka

Senior Technical Analyst jobs in Bengaluru, Karnataka

Application Security Engineer jobs in Bengaluru, Karnataka

Operations Associate jobs in Pune, Maharashtra

Security Engineer jobs in Bengaluru, Karnataka

Project Manager jobs in Remote

Lead Scrum Master jobs in Bengaluru, Karnataka

Security Supervisor jobs in Bengaluru, Karnataka

Security Officer jobs in Kolkata, West Bengal

Security Operations Manager jobs in Mumbai, Maharashtra

Platform Engineer jobs in Bengaluru, Karnataka

Security Architect jobs in Bengaluru, Karnataka

Operations Administrator jobs in Chennai, Tamil Nadu

Senior Security Engineer jobs in Bengaluru, Karnataka

Information Security Analyst jobs in Mumbai, Maharashtra

Senior Administrator jobs in Chennai, Tamil Nadu

Principal, Engineering College jobs in Punjab

College Principal jobs in Chennai, Tamil Nadu

Principal Cbse School, Teacher jobs in Nagpur, Maharashtra

Senior Administrator - Security Investigations, SIEM

HCLTech -
Chennai, Tamil Nadu

Apply Now

Job details

6 days ago

Qualifications

TCP
Azure
R
Windows
CEH
AWS
Nessus
Bachelor's degree
Splunk
DNS
ServiceNow
GIAC Certification
SIEM
Linux
Nmap
TCP/IP
Cybersecurity
VPN

Full job description

Chennai, Tamil Nadu
Job Summary

Job Summary : The SOC Operations Analyst L2 is responsible for monitoring and analyzing security alerts using tools like Microsoft Sentinel. The role includes investigating incidents, identifying real threats, and supporting response and remediation activities. The analyst works on alerts escalated from L1, performs log analysis, and helps improve detection by fine-tuning rules. They also support threat hunting, automation, and maintain proper documentation and reports. This role requires good knowledge of SIEM tools, security logs, and common cyber threats, along with close coordination with internal security and IT teams.J ob Description : Threat Monitoring & Analysis\\\\r\\\\n \\\\r\\\\nMonitor security alerts from SIEM tools (Sentinel, ArcSight, Splunk, QRadar)\\\\r\\\\nPerform in-depth analysis of escalated incidents (L1 L2)\\\\r\\\\nValidate true positives and eliminate false positives\\\\r\\\\n \\\\r\\\\n Incident Investigation & Response\\\\r\\\\n \\\\r\\\\nConduct root cause analysis (RCA) for security incidents\\\\r\\\\nPerform log correlation across multiple sources (EDR, Firewall, AD, Cloud logs)\\\\r\\\\nSupport incident containment and remediation actions\\\\r\\\\n \\\\r\\\\n Use Case Tuning & Optimization\\\\r\\\\n \\\\r\\\\nFine-tune SIEM correlation rules and alerts\\\\r\\\\nReduce noise and improve detection accuracy\\\\r\\\\nMap detections to MITRE ATT&CK; framework\\\\r\\\\n \\\\r\\\\n Threat Hunting (Proactive)\\\\r\\\\n \\\\r\\\\nPerform proactive threat hunting using SIEM, EDR, and threat intelligence\\\\r\\\\nIdentify hidden or advanced threats not detected by rules\\\\r\\\\nDevelop hypotheses-based hunting scenarios\\\\r\\\\n \\\\r\\\\n Automation & Playbooks\\\\r\\\\n \\\\r\\\\nSupport SOAR playbook execution (Sentinel Logic Apps, etc.)\\\\r\\\\nAssist in developing automation for repetitive tasks\\\\r\\\\nIntegrate SIEM with ticketing systems (ServiceNow)\\\\r\\\\n \\\\r\\\\n Reporting & Documentation\\\\r\\\\n \\\\r\\\\nDocument incidents, findings, and recommendations\\\\r\\\\nPrepare incident reports, dashboards, and metrics\\\\r\\\\nMaintain SOPs, runbooks, and knowledge base\\\\r\\\\n \\\\r\\\\n Collaboration\\\\r\\\\n \\\\r\\\\nWork closely with L1 analysts, L3 engineers, and IR teams\\\\r\\\\nCoordinate with IT teams for remediation actions\\\\r\\\\nSupport audits and compliance activities

Key Responsibilities

Job Responsibilities : Threat Monitoring & Analysis Monitor security alerts from SIEM tools (Sentinel, ArcSight, Splunk, QRadar) Perform in-depth analysis of escalated incidents (L1 L2) Validate true positives and eliminate false positives Incident Investigation & Response Conduct root cause analysis (RCA) for security incidents Perform log correlation across multiple sources (EDR, Firewall, AD, Cloud logs) Support incident containment and remediation actions Use Case Tuning & Optimization Fine-tune SIEM correlation rules and alerts Reduce noise and improve detection accuracy Map detections to MITRE ATT&CK; framework Threat Hunting (Proactive) Perform proactive threat hunting using SIEM, EDR, and threat intelligence Identify hidden or advanced threats not detected by rules Develop hypotheses-based hunting scenarios Automation & Playbooks Support SOAR playbook execution (Sentinel Logic Apps, etc.) Assist in developing automation for repetitive tasks Integrate SIEM with ticketing systems (ServiceNow) Reporting & Documentation Document incidents, findings, and recommendations Prepare incident reports, dashboards, and metrics Maintain SOPs, runbooks, and knowledge base Collaboration Work closely with L1 analysts, L3 engineers, and IR teams Coordinate with IT teams for remediation actions Support audits and compliance activities

Skill Requirements

Skill Requirement : Technical Skills Required Core Skills Hands-on experience with SIEM tools (Sentinel / ArcSight / Splunk / QRadar) Strong understanding of logs: Windows Event Logs Syslog / Firewall logs Cloud logs (Azure/AWS/GCP) Detection & Security Knowledge MITRE ATT&CK; framework Cyber Kill Chain Threat vectors: phishing, malware, ransomware, insider threats Tools & Technologies EDR tools (Microsoft Defender, CrowdStrike, Carbon Black) Email security tools Vulnerability tools (Qualys, Nessus) Querying & Analysis KQL / SPL / Query languages Log correlation and pattern analysis Systems & Networking Networking basics (TCP/IP, DNS, HTTP, VPN) Windows & Linux fundamentals

Other Requirements

Other Requirement : 3–6 years in SOC / Security Operations Experience handling P2/P3 incidents independently Exposure to incident response and threat hunting Education & Certifications Bachelor’s degree in IT / Cybersecurity Preferred certifications: SC-200 (Microsoft Security Operations) CEH / Security+ GIAC / CySA+ (optional)

#body.unify div.unify-button-container .unify-apply-now: focus, #body.unify div.unify-button-container .unify-apply-#body.unify div.unify-button-container .unify-apply-now: focus, #body.unify div.unify-button-container .unify-apply-

Apply Now

Refine Your Search

Senior Administrator - Security Investigations, SIEM

L3 SOC Analyst / Incident Response Analyst

Azure Infra AI Operations & Platform Engineer

SeniorAdministrator - IAM Operations

SharePoint Lead + Scrum Master - Tieto tech Consulting (m/f/d)

IT Security Analyst

Senior Tech Specialist, Digital Workplaces – R01566584

M365 Security Engineer

Principal Consultant, Secure Microsoft 365 Collaboration and AI

Security Automation Engineer

Senior Technical Analyst - Endpoint Security

Lead Administrator (Support &Operations)

Asst. Manager Application & Product Security (DevSecOps & AI Security)

M&A Integration-M&A M365 Security-On Contract

Senior Security Engineer, Managed Microsoft Sentinel

Project Manager

Security Architect

Track Lead - Security Investigations, SIEM

Security Operations Manager

Lead Security Engineer - Workspace

I want to receive the latest job alerts for defender for cloud apps

Explore jobs in more locations

Jobseeker tools

Employer Tools

Browse

Stay Connected