Sentinel Engineer- KQL & Defender

CyberProof is a cyber security services and platform company whose mission is to help our customers react faster and smarter – and stay ahead of security threats, by creating secure digital ecosystems. CyberProof automates processes to detect and prioritize threats early and respond rapidly and decisively.

CyberProof is part of the UST Global family. Some of the world’s largest enterprises trust us to create and maintain secure digital ecosystems using our comprehensive cyber security platform and mitigation services.

Join our dynamic Use Case Factory team as a Sentinel SIEM Engineer with in-depth Microsoft Defender expertise. Leverage your skills to deliver best-in-class security solutions and empower clients to thrive in the digital landscape.

Responsibilities:

• Deep-dive into client needs: Uncover security challenges and map them to optimal Azure Sentinel and Defender configurations.
• Advise with confidence: Share your Defender knowledge, guiding clients on security principles and leveraging Defender's full potential.
• Become a deployment pro: Seamlessly set up and configure Defender platforms, adhering to best practices and vendor guidelines.
• Bridge the data gap: Assist clients in integrating essential log sources with Sentinel, ensuring comprehensive threat detection.
• Data validation maestro: Verify log source data integrity within Sentinel, guaranteeing actionable insights.
• Document like a champion: Clearly articulate the Defender solution build process for future reference and knowledge sharing.
  
  

• Defender champion: Hands-on experience with Microsoft Defender, including extensive KQL proficiency and use case creation.
• Sentinel savant: Experience with Azure Sentinel SIEM platform (preferred), with a passion for its capabilities.
• Automation adept: Experience with Function Apps and/or Logic Apps for streamlined security workflows.
• Security mastermind: Deep understanding of diverse attack vectors and corresponding protection strategies.
• ADX enthusiast (preferred): Experience with ADX configuration, data onboarding, and ongoing management.
• DevOps whisperer (preferred): Familiarity with DevOps principles for efficient solution delivery.
• Academic edge: University degree in information security or equivalent work experience.