Microsoft Sentinel Engineer / SIEM Engineer (Cloud Security)

Experience: 2–6 years

Location: Bengaluru / Pune / Hyderabad / Noida / Gurgaon (Hybrid or Remote options depending on role)

Employment Type: Full-time / Contract

Open Positions: 7

Role Overview

We are looking for skilled Microsoft Sentinel Engineers to design, configure, tune, and operate Microsoft Sentinel SIEM environments for enterprise clients.

The ideal candidate will have hands-on expertise in data connectors, analytics rule creation, incident triage, automation (SOAR), and security monitoring.

Key Responsibilities

1. Configure and onboard logs into Microsoft Sentinel
2. Create and fine-tune Analytics Rules, Hunting Queries, and Workbooks
3. Build automation workflows using Logic Apps / SOAR
4. Configure DCRs, watchlists, threat intelligence feeds, UEBA
5. Investigate incidents & collaborate with SOC teams for response
6. Create KQL-based dashboards, threat hunting queries & reports
7. Integrate Sentinel with Microsoft Defender suite and third-party tools
8. Participate in continuous improvement of detection & automation maturity

Required Skills

1. Hands-on experience with Microsoft Sentinel SIEM
2. Strong KQL query writing & log analysis
3. Experience integrating Defender, Azure AD logs, O365, VM, Network logs
4. Understanding of MITRE ATT&CK, SIEM Use Cases, Threat Detection
5. Experience in security monitoring or SOC operations

Nice to Have

1. Azure security certifications: SC-200, AZ-500, MS-500
2. Defender for Endpoint / Sentinelone / CrowdStrike exposure
3. SOAR orchestration experience