CMS-TDR Senior
As part of our EY-cyber security team, who shall work as SME for Microsoft Sentinel solutions in TDR team
The opportunity
We're looking for Senior Consultant with expertise in Cloud Security solutions. This is a fantastic opportunity to be part of a leading firm whilst being instrumental in the growth of a new service offering.
Your key responsibilities
- Architecting and implementation of cloud security monitoring platforms MS Sentinel
- Provide consulting to customers during the testing, evaluation, pilot, production, and training phases to ensure a successful deployment.
- Perform as the subject matter expert on Cloud Security solutions for the customer, use the capabilities of the solution in the daily operational work for the end customer.
- Securing overall cloud environments by applying cybersecurity tools and best practices
- Advise customers on best practices and use cases on how to use this solution to achieve customer end state requirements.
- Content development which includes developing process for automated security event monitoring and alerting along with corresponding event response plans for systems
Skills and attributes for success
- Customer Service oriented - Meets commitments to customers; Seeks feedback from customers to identify improvement opportunities.
- Expertise in content management in MS Sentinel
- Good knowledge in threat modelling. Experience in creating use cases under Cyber kill chain and Mitre attack framework
- Expertise in integrating critical devices/applications including unsupported (in-house built) by creating custom parsers
- Below mentioned experiences/expertise on Sentinel
- Develop a migration plan from Splunk/QRadar/LogRhythm to MS Sentinel
- Deep understanding of how to implement best practices for designing and securing Azure platform
- Experiencing advising on Microsoft Cloud Security capabilities across Azure platform
- Configure data digestion types and connectors
- Analytic design and configuration of the events and logs being digested
- Develop, automate, and orchestrate tasks(playbooks) with logic apps based on certain events
- Configure Sentinel Incidents, Workbooks, Hunt queries, Notebooks
- Experience in other cloud native security platforms like AWS and GCP is a plus
- Scripting knowledge (Python, Bash, PowerShell)
- Extensive knowledge of different security threats
- Good knowledge and experience in Security Monitoring
- Good knowledge and experience in Cyber Incident Response
To qualify for the role, you must have
- B. Tech./ B.E. with sound technical skills
- Strong command on verbal and written English language.
- Demonstrate both technical acumen and critical thinking abilities.
- Strong interpersonal and presentation skills.
- Certification in Azure (any other cloud vendor certification is a plus)
Ideally, you'll also have
- People/Project management skills.
