Cloud Operations - Senior Specialist-Cyber Security-Engineering

Deploy, configure, and maintain Microsoft Sentinel SIEM solution.

Integrate various log sources (cloud, on-prem, network, endpoints) into Sentinel.

Ensure data connectors and ingestion pipelines are optimized for performance and cost.

Develop and maintain detection rules, analytics, and use cases in Sentinel.

Monitor alerts and dashboards for suspicious activities and anomalies.

Collaborate with SOC analysts for incident triage and investigation.

Implement automation using Logic Apps and Playbooks for alert enrichment and response.

Optimize Sentinel workbooks, hunting queries, and dashboards for better visibility.

Generate compliance and security posture reports using Sentinel workbooks.

Ensure adherence to regulatory requirements (ISO, GDPR, etc.) through proper logging and monitoring.

Conduct proactive threat hunting using KQL (Kusto Query Language) .

Assist in forensic analysis and root cause investigations.

Apply patches, updates, and maintain Sentinel health.

Monitor ingestion costs and optimize retention policies.