Role Overview :

We are seeking a seasoned Microsoft Sentinel SIEM Administrator to join our security operations team in Noida. In this capacity, you will serve as the primary architect and operator for our cloud-native security ecosystem, ensuring robust threat detection and incident response capabilities.

You will collaborate closely with cross-functional engineering teams, including Java and Spring-based microservices developers, to integrate security telemetry across our hybrid cloud infrastructure. By optimizing log management and refining threat detection logic, you will directly influence the organization's security posture, minimizing risk and ensuring the integrity of our digital assets for our global client base.

Key Responsibilities :

- Architect and maintain Microsoft Sentinel instances to ensure seamless log ingestion and real-time monitoring across Azure and AWS environments.

- Develop and optimize KQL queries to identify complex security threats, reducing mean time to detect (MTTD) for the Security Operations Center.

- Automate incident response workflows by designing and deploying SOAR playbooks, enabling the team to respond to security events with greater speed and precision.

- Collaborate with application development teams to integrate security logging into Java and Spring microservices, ensuring comprehensive visibility into application-layer threats.

- Manage vulnerability assessment cycles and coordinate with stakeholders to remediate security gaps, thereby strengthening the overall network security perimeter.

- Conduct advanced security analytics and threat hunting exercises to proactively uncover hidden risks within the enterprise infrastructure.

Required Skillset :

- Demonstrated expertise in managing Microsoft Sentinel and Azure security services, with a deep understanding of log management tools and SIEM architecture.

- Proven ability to write complex KQL queries and PowerShell scripts to automate security tasks and enhance detection logic.

- Strong technical background in cloud security, specifically within AWS and Azure, with the ability to secure microservices architectures.

- Proficiency in database technologies, including SQL and NoSQL, to support data-driven security analysis and reporting.

- Exceptional analytical and communication skills, with the ability to translate complex security findings into actionable insights for non-technical stakeholders.

- A proactive mindset toward cyber security, with the agility to adapt to evolving threat landscapes in a fast-paced, hybrid work environment.

- A Bachelor's degree in Computer Science, Information Security, or a related field, complemented by 5 - 8 years of hands-on experience in Security Operations Centers.