The role involves designing and developing SOAR playbooks for incident automation using Microsoft Sentinel, enhancing SOC efficiency with custom solutions, and utilizing various scripting technologies.

The Associate - Cybersecurity role involves integrating and optimizing log sources in Microsoft Sentinel, developing monitoring solutions, and scripting automation for analysis. Responsibilities include configuring data ingestion, troubleshooting failures, and ensuring data retention compliance while developing standard operating procedures and documentation.

Manage and maintain SIEM infrastructure, focusing on threat detection and incident response within a Microsoft ecosystem. Responsibilities include monitoring alerts, developing detection rules, and mentoring junior analysts.