Azure Cloud Native Security Engineer(Microsoft Defender Sentinel)

Alike Thoughts; Bengaluru, Mumbai; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

Alike Thoughts seeks an Azure Cloud Native Security Engineer with 5-8 years of experience to secure Microsoft Defender, Sentinel and Azure Log Analytics in enterprise cloud environments.

You will build SIEM/SOAR use cases, automate incident response, and integrate security workflows into CI/CD pipelines using Python and Logic Apps, with a focus on log collection and threat hunting.

Qualifications

• Must have OT/ICS cybersecurity experience and strong Microsoft Sentinel expertise.
• High proficiency with Microsoft Sentinel and Azure Log Analytics required.
• Hands-on experience in SIEM/SOAR implementation and automation.
• Familiarity with automation scripting (PowerShell/Python).
• Strong knowledge of Azure security frameworks and compliance.

Responsibilities

• Azure Security & Defender: Implement and manage Azure Cloud Native Security and Defender services.
• Sentinel & Log Analytics: Develop SIEM/SOAR use cases, rules, playbooks, and incident response workflows.
• KQL Development: Craft queries for data normalization and ingestion pipelines.
• Log Collection: Integrate diverse log sources and connectors (syslog, rsyslog, syslogng).
• Automation & DevOps: Automate incident response with Logic Apps and CI/CD integrations, use Python/Jupyter notebooks.
• Additional Security Skills: Azure Network Security, DDoS, WAF, multitenant Sentinel deployment, MS Purview.

Skills

OT Security

Microsoft Sentinel

Azure Log Analytics

SIEM/SOAR implementation

PowerShell

Python

Azure security frameworks

Compliance

Education

Bachelor’s degree in CS/Engineering

Microsoft certifications in Azure Security / Sentinel

Tools

Logic Apps

Jupyter

Job description

Job Title: Azure Cloud Native Security Engineer Microsoft Defender / Sentinel

Location: Mumbai / Bengaluru Experience: 5-8 yrs Notice Period: Immediate to 30 Days Grade: P3

Role Overview: We are seeking an experienced Azure Cloud Security Engineer with strong expertise in Microsoft Defender, Sentinel, and Azure Log Analytics. The role focuses on SIEM/SOAR use case development, log collection, automation, and operational excellence in enterprise cloud environments.

Key Responsibilities:

• Azure Security & Defender: Implement and manage Azure Cloud Native Security, Microsoft Defender (Cloud, ATP, Security).
• Sentinel & Log Analytics: Develop SIEM/SOAR use cases, analytic rules, playbooks, workbooks, notebooks, incident response, and threat hunting.
• KQL Development: Craft queries for data normalization, parsing, and ingestion pipelines.
• Log Collection: Connect diverse log sources (syslog, rsyslog, syslogng), integrate onpremises logs, configure connectors.
• Automation & DevOps: Automate incident response with Logic Apps, integrate use cases into CI/CD pipelines, develop Jupyter notebooks with Python.
• Additional Security Skills: Azure Network Security, DDoS, WAF, Firewall, multitenant Sentinel deployment, MS Purview (DLP, Data Security, Governance, Compliance).

Required Skills:

• Mandatory: OT Security – OT/ICS Cybersecurity, Microsoft Sentinel.
• High proficiency in Microsoft Sentinel & Azure Log Analytics.
• Handson experience in SIEM/SOAR implementation.
• Familiarity with automation scripting (PowerShell/Python).
• Strong knowledge of Azure security frameworks and compliance.

Preferred Qualifications:

• Bachelor’s degree (BCA/MCA/BE/BTech or equivalent).
• Microsoft certifications in Azure Security / Sentinel.
• Experience in enterprise or regulated environments.

Success Metrics:

• Effective SIEM/SOAR use case deployment.
• Improved log collection & incident response efficiency.
• Enhanced automation and operational security posture.