SIEM Engineer - Temp Position

Responsibilities:

• Design, implement, and maintain the Microsoft Azure Sentinel SIEM platform.
• Integrate various custom and standard log sources into Sentinel (via API, Syslog, Event Hubs, etc.).
• Develop and manage custom Analytics Rules using KQL and Sentinel templates.
• Create and maintain Playbooks (using Logic Apps, Function Apps)
• Automate incident response and enrichment processes using scripting and automation tools.
• Provide technical training, ation, and best practice guidance.

Required Qualifications:

• Minimum 3 years of experience with SIEM platforms, including at least 2 years of hands-on work with Azure Sentinel.
• Experience in developing custom connectors and automations using Python - MUST!!!
• Proficient in Kusto Query Language (KQL) for building queries, detections, and investigations.
• Experience configuring and managing Data Connectors (API, Syslog, Event Hub, etc.).
• Strong knowledge of related Azure services: Log Analytics, Azure Monitor, Logic Apps, Azure Functions.
• Hands-on experience with Linux virtual machines, Azure Virtual Networks, and cloud infrastructure setup.
• Self-motivated and proactive, with the ability to quickly learn and adapt to new technologies and tools.
• Excellent verbal and written communication skills in English, including the ability to write technical ation.