Job title: Azure Security Engineer
Location: Bengaluru
Experience: 3 to 12 years | Full-Time
We are looking for a skilled SOC Engineer with strong expertise in SIEM, EDR, and SOAR technologies, particularly within the Microsoft and SentinelOne ecosystem.
Key Responsibilities
- Engineer and manage SIEM solutions using Microsoft Sentinel
- Integrate and monitor endpoints using Microsoft Defender for Endpoint and SentinelOne
- Work with Microsoft Defender for IoT for IoT/OT threat visibility
- Develop and optimize KQL (Kusto Query Language) queries for detection and threat hunting
- Build automation workflows using Azure Logic Apps (SOAR playbooks)
- Integrate alerts and workflows with ServiceNow ITSM
- Support incident triage, response, and continuous improvement of detection use cases
- Align with SOC and IR teams to enhance security posture
Must-Have Skills
- Hands-on experience with Microsoft Sentinel (connectors, analytics rules, hunting)
- Strong expertise in MDE (Microsoft Defender for Endpoint) and SentinelOne (EDR)
- Experience with D4IoT (Microsoft Defender for IoT)
- Proficiency in KQL for threat detection and analysis
- Experience building Logic Apps / SOAR Playbooks
- Familiarity with ServiceNow ITSM integration
- Understanding of Windows/Linux systems, networking, and cloud (Azure/AWS)