Requirements
Requires a degree in computer science, Information Technology, Cybersecurity, or a related field, with 6-8 years of experience in SOC operations, specifically in Sentinel SIEM management. Must possess knowledge of Sentinel SIEM, MS Defender, cloud and network technologies, and SOC Automation using Azure Logic Apps. Strong problem-solving and collaboration skills are essential.
Description
The Senior SOC Engineer, Azure Defender XDR, is a critical role responsible for delivering SIEM management services, particularly focusing on Sentinel, within the Security Operations Center (SOC). This role encompasses onboarding new log sources, enhancing and optimizing telemetry, ensuring system updates, resolving issues, and maintaining SIEM performance according to best practices. Reporting to the SOC Engineering & Architecture Manager, the SOC Engineer, Sentinel, is a professional with a solid foundation in SOC operations.Responsibilities:Sentinel SIEM management services within the SOC environment.Govern SOC critical log sources, ensuring their proper functionality and integration with Sentinel SIEM.Log source issues, coordinate with customers to diagnose and resolve them in a timely manner and optimize telemetry within the Sentinel environment to improve data collection, correlation, and reporting.Enhance Automation and orchestration for SOC Operations using Azure Logic Apps.The performance of the Azure XDR stack (Sentinel & Defender) according to established best practices.In continuous process improvements to increase SOC efficiency and effectiveness.Regular and accurate reports on Sentinel services and SOC operations to relevant stakeholders.Skills:Knowledge and hands-on experience with Sentinel SIEM and other related technologies such as MS Defender.Understanding of cloud and network technologies, essential for efficient log source onboarding.Technical proficiency in SOC Automation using Azure Logic Apps.Technical capabilities in a complex, fast-paced SOC environment.To diagnose and troubleshoot log source issues related to cloud and network infrastructures.Understanding of SOC operations, cybersecurity principles, and best practices.Problem-solving skills and the ability to make decisions under pressure.To collaborate effectively with a variety of team members, including interfacing with customers to resolve issues.Proficiency in written and verbal communicationCertifications:Must have: in SC-200in AZ 500Optional: Certifications like AWS Certified Solutions Architect, Google Professional Cloud Architect, or Microsoft Certified: Azure Solutions Architect Expert.Certifications such as CCNA or CCNP are advantageous.Educational Experience:Degree in computer science, Information Technology, Cybersecurity, or a related field.Minimum of 6-8 years of experience in SOC operations, with significant experience in Sentinel SIEM management.Experience in a technical role within a SOC or similar cybersecurity environment.