Strong experience with CrowdStrike, vulnerability management, and handling security incidents, phishing incidents, and high-level incident response is required.

The role also demands proficiency in SIEM log source onboarding, fine-tuning detection rules, developing detection logic, and using KQL for advanced security analytics and monitoring.

Incident Response and Collaboration :

- Collaborate with SOC, CERT, or CSIRT teams for effective incident monitoring and response.

- Investigate and respond to cybersecurity incidents, including forensic analysis of attack patterns.

SIEM Administration :

- Provide ongoing support for SIEM Architecture, ensuring efficient log ingestion, parsing, and normalization to enhance threat visibility and detection capabilities.

- Designed and customized automated playbooks and interactive dashboards in SIEM to meet specific security monitoring and incident response requirements.

Threat Intelligence Analysis :

- Gather, process, and analyze threat intelligence feeds to identify emerging threats.

- Proactively communicate relevant threat scenarios and provide actionable insights.

Threat Detection Development :

- Develop and fine-tune advanced KQL queries and analytics rules in Microsoft Sentinel to detect sophisticated attack vectors.

- Build and test hypothetical threat scenarios to enhance threat detection capabilities.

- Optimize detection systems to minimize false positives and maximize precision.

Incident Response and Collaboration :

- Collaborate with SOC, CERT, or CSIRT teams for effective incident monitoring and response.

- Investigate and respond to cybersecurity incidents, including forensic analysis of attack patterns.

Security Tool Management :

- Configure, monitor, and maintain security tools such as SIEM (Microsoft Sentinel), Defender for Cloud, antivirus solutions, and consolidated security dashboards.

Continuous Improvement :

- Participate in developing and implementing security concepts, hardening guidelines, and monitoring systems.

- Perform penetration tests, vulnerability assessments, and audits to ensure robust security measures.

- Contribute to the creation and refinement of SOC policies, processes, and procedures.

Desirable Certifications :

- Microsoft Certified: Security Operations Analyst Associate SC 200

- CEH

Educational Qualification : Relevant BE/Btech degree in CS/IT/ECE/EEE or MCA/M.Sc. in CS/IT