Use Case Engineer

Use Case Engineer

CyberProof is a cyber security services and platform company whose mission is to help our customers react faster and smarter – and stay ahead of security threats, by creating secure digital ecosystems. CyberProof automates processes to detect and prioritize threats early and respond rapidly and decisively.

CyberProof is part of the UST Global family. Some of the world’s largest enterprises trust us to create and maintain secure digital ecosystems using our comprehensive cyber security platform and mitigation services.

We are looking for a Use Case Engineer in the Use Case Factory team to join us and become a member of our global Security Operations Team.

Main Tasks and Accountabilities:

Understand customer requirements and recommend best practices related to Sentinel or Qradar solutions.

Offer consultative advice in security principles and best practices related to SIEM operations.

Developing new use cases, rules, correlations, dashboards to meet the customer needs.

Design and document SIEM architectures to meet the customer needs.

Assist customer with SIEM sizing, Architectures, and client technical meetings.

Deploy and configure SIEM platforms as per Vendor guidelines and industry Best Practices.

Assist client with technical guidance to configure end log sources in-scope to be logged to Different SIEM platforms.

Verification of data of log sources.

Document the build of the solution.

Mandatory Requirements

Experience with Azure Sentinel SIEM platform. The person can have prior experience in other common SIEM platforms as well but the recent role needs to be with Sentinel as the role is expected to work only in this platform.

Total of 10+ years of experience in cybersecurity roles and Minimum 2+ years experience in a similar role.

Preferred SIEM vendor certification of administrator.

Hand-on Experience in KQL with writing Use Cases in Sentinel or hands-on experience in another Use Case development.

Experience in Function APP and /or Logic APP

Familiarity with different security attack vectors and means of protection.

Need the person to be hands-on in ADX (Preferred but not mandatory)

Configuration, data onboarding, and ongoing management

Devops experience (Preferred but not mandatory)

Some familiarity would be highly desirable.

University degree in information security or equivalent work experience.