Manage and maintain SIEM infrastructure, focusing on threat detection and incident response within a Microsoft ecosystem. Responsibilities include monitoring alerts, developing detection rules, and mentoring junior analysts.
Job Summary: We are seeking a skilled and experienced SIEM Platform Engineer specializing in Microsoft Defender for Endpoint (MDE) at Level 2 and above. The ideal candidate will be responsible for implementing, managing, and maintaining the SIEM environment, focusing on threat detection, incident response, and system optimization within a Microsoft ecosystem.
Key Responsibilities:
- Manage and maintain the SIEM infrastructure, particularly MDE, ensuring optimal performance and uptime.
- Monitor and analyze security alerts and events from various data sources within the Microsoft ecosystem.
- Perform advanced threat hunting, detection, and analysis using MDE and related SIEM tools.
- Develop, tune, and optimize detection rules, dashboards, and reports.
- Investigate and respond to security incidents, conducting root cause analysis and implementing mitigations.
- Collaborate with IT and Security teams to integrate new data sources and refine monitoring strategies.
- Conduct system upgrades, patch management, and version control to maintain security tool effectiveness.
- Document incidents, procedures, and technical configurations.
- Train and mentor junior security analysts in leveraging SIEM and MDE effectively.
Qualifications:
- Bachelor’s degree in computer science, Information Security, or related field (or equivalent experience).
- Minimum of 3-5 years of experience working with SIEM platforms, specifically Microsoft Defender for Endpoint (Level 2 and above).
- Strong understanding of threat detection, incident response, and security operations.
- Proficiency in scripting (e.g., PowerShell, Python) for automation and log parsing.
- Hands-on experience with security monitoring, event correlation, and log management.
- Excellent problem-solving skills and attention to detail.
- Relevant certifications (e.g., Microsoft Certified: Security Operations Analyst, CompTIA Security+, CISSP) are a plus.
Key Competencies:
- Analytical thinking and threat analysis
- Strong communication and collaboration skills
- Adaptability and continuous learning
- Proactive problem-solving
Similar Jobs
Information Technology • Software • Business Intelligence
The role involves leading the design and implementation of smart factory architectures, integrating OT and cloud services while ensuring cybersecurity and data flow validation across multiple sites.
Top Skills:
AWSAzureDatabricksDcsKubernetesMesMqttOpc UaPlcRest ApisScadaSnowflakeTerraform
Information Technology
The Technology Business Consultant E will architect Asset Finance solutions, lead requirements workshops, design integrations, and guide best practices while mentoring junior consultants.
Top Skills:
APIsETLMicroservicesSQLWeb ServicesXML
Information Technology
The role involves leading client engagements, conducting requirements workshops, configuring software, and providing training and support.
Top Skills:
AzureData Integrity ManagerIntellimatchSQL ServerWindows Server
What you need to know about the Delhi Tech Scene
Delhi, India's capital city, is a place where tradition and progress co-exist. While Old Delhi is known for its rich history and bustling markets, New Delhi is defined by its modern architecture. It's clear the region places a strong emphasis on preserving its cultural heritage while embracing technological advancements, particularly in artificial intelligence, which plays a central role in shaping the city's tech landscape, fueled by investments in research and development.
