Manage and maintain SIEM infrastructure, focusing on threat detection and incident response within a Microsoft ecosystem. Responsibilities include monitoring alerts, developing detection rules, and mentoring junior analysts.
Job Summary: We are seeking a skilled and experienced SIEM Platform Engineer specializing in Microsoft Defender for Endpoint (MDE) at Level 2 and above. The ideal candidate will be responsible for implementing, managing, and maintaining the SIEM environment, focusing on threat detection, incident response, and system optimization within a Microsoft ecosystem.
Key Responsibilities:
- Manage and maintain the SIEM infrastructure, particularly MDE, ensuring optimal performance and uptime.
- Monitor and analyze security alerts and events from various data sources within the Microsoft ecosystem.
- Perform advanced threat hunting, detection, and analysis using MDE and related SIEM tools.
- Develop, tune, and optimize detection rules, dashboards, and reports.
- Investigate and respond to security incidents, conducting root cause analysis and implementing mitigations.
- Collaborate with IT and Security teams to integrate new data sources and refine monitoring strategies.
- Conduct system upgrades, patch management, and version control to maintain security tool effectiveness.
- Document incidents, procedures, and technical configurations.
- Train and mentor junior security analysts in leveraging SIEM and MDE effectively.
Qualifications:
- Bachelor’s degree in computer science, Information Security, or related field (or equivalent experience).
- Minimum of 3-5 years of experience working with SIEM platforms, specifically Microsoft Defender for Endpoint (Level 2 and above).
- Strong understanding of threat detection, incident response, and security operations.
- Proficiency in scripting (e.g., PowerShell, Python) for automation and log parsing.
- Hands-on experience with security monitoring, event correlation, and log management.
- Excellent problem-solving skills and attention to detail.
- Relevant certifications (e.g., Microsoft Certified: Security Operations Analyst, CompTIA Security+, CISSP) are a plus.
Key Competencies:
- Analytical thinking and threat analysis
- Strong communication and collaboration skills
- Adaptability and continuous learning
- Proactive problem-solving
Similar Jobs
Information Technology • Software • Business Intelligence
The role involves leading the design and implementation of smart factory architectures, integrating OT and cloud services while ensuring cybersecurity and data flow validation across multiple sites.
Top Skills:
AWSAzureDatabricksDcsKubernetesMesMqttOpc UaPlcRest ApisScadaSnowflakeTerraform
Information Technology
The consultant will lead cross-functional teams in IT project management, focusing on delivery, stakeholder communication, risk management, and adherence to project management best practices.
Top Skills:
Microsoft ProjectMs Project OnlinePower BIPowerPointSharepointVisio
Fintech • Consulting
As a Salesforce Techno-Functional Consultant, you will design and implement scalable Salesforce solutions, manage integrations, ensure data quality, and support enhancements while acting as a liaison between business and technical teams.
Top Skills:
ApexFlowsGitLightning Web ComponentsProcess BuilderRestSalesforceSoapVisualforce
What you need to know about the Delhi Tech Scene
Delhi, India's capital city, is a place where tradition and progress co-exist. While Old Delhi is known for its rich history and bustling markets, New Delhi is defined by its modern architecture. It's clear the region places a strong emphasis on preserving its cultural heritage while embracing technological advancements, particularly in artificial intelligence, which plays a central role in shaping the city's tech landscape, fueled by investments in research and development.
