Azure/SIEM Analyst

Configuration of Azure Sentinel for the following :
- Configure data digestion types and connectors.
- Analytic design and configuration of the events and logs being digested.
- Develop, automate, and orchestrate tasks(playbooks) with logic apps based on certain events.
- Create incident categorization and threat management plan.
- End to end operational knowledge of Azure Incident Management Process/SLAs.
- Configure Sentinel Incidents, Workbooks, Hunt queries, Notebooks.
- Support on-going development and troubleshooting of Azure Sentinel.
- Advise and develop Azure Sentinel adoption migration roadmap for clients.
- Azure Security Services for Vulnerability Assessment and Compliance practices analysis,
- SIEM management handling good knowledge on KQL Query Language.
- Experience in security device management and SIEM (ArcSight).
- In-depth knowledge of security concepts such as cyber-attacks and techniques, threat vectors, risk management, incident management etc.
- Experience in threat management.
-Knowledge of various operating system flavors including but not limited to Windows, Linux, Unix.
-Knowledge of applications, databases, middleware to address security threats against the same.
-Proficient in preparation of reports, dashboards and documentation.

Skillsets :
- Azure sentinel experience.
- Experience with a variety of SIEM tools.
- Experience in interacting with other IT stakeholders gathering requirements, onboarding, configuration, and optimization of tools.
- Experiencing advising on Microsoft Cloud Security capabilities across Azure platform.
- Deep understanding of how to implement best practices for designing and securing Azure platform.
- Deep understanding of security vulnerabilities.
- Working in a security operation center.
- Vulnerability analysis and assessment experience.
- Troubleshooting Root cause analysis skills.
- Advanced Persistent Threat techniques.