Azure Sentinel Security Engineer

Acesoft Labs; Bengaluru; On-site; INR 1,200,000 - 2,200,000; Full time

Job summary

Acesoft Labs in Bengaluru, India seeks an Azure Sentinel Security Engineer to monitor and optimize cloud security using Sentinel and related tools. You will develop automated workflows, integrate threat intelligence, and implement incident response use cases, collaborating across teams and documenting configurations.

The role requires strong scripting skills (Python/PowerShell) and hands-on experience with SIEM content, dashboards, and governance in Azure environments.

Qualifications

• Experience with Azure Sentinel, Defender and Microsoft security tools.
• Proficiency in scripting (Python or PowerShell).
• Strong knowledge of Azure security services and governance.
• Experience creating Sentinel Playbooks and dashboards for monitoring.

Responsibilities

• Monitor and audit cloud infrastructure using Azure Sentinel.
• Develop and maintain automated workflows for security operations.
• Integrate threat intelligence feeds into Sentinel analytics and SOAR.
• Develop incident response use cases and remediation recommendations.
• Integrate security logs into Azure Log Analytics Workspace.
• Collaborate with team members and stakeholders for effective communication.
• Maintain comprehensive documentation related to Sentinel configurations and processes.

Skills

Azure Sentinel

Microsoft Defender

Python

PowerShell

KQL (Kusto Query Language)

SIEM content development

SOC Run Books

Azure security tooling

Education

Microsoft Certified: Azure Security Engineer Associate

Tools

Azure Sentinel

Azure Log Analytics

ArcSight

Splunk

Job description

Azure Sentinel Security Engineer

Responsibilities:

• Logging and Auditing: Monitor and audit cloud infrastructure using Azure Sentinel.
• Automated Workflows: Develop and maintain automated workflows for security operations.
• Threat Intelligence: Integrate threat intelligence feeds into Sentinel analytics and SOAR.
• Incident Response: Develop incident response use cases and remediation recommendations.
• Log Integration: Integrate security logs into Azure Log Analytics Workspace.
• Collaboration: Work collaboratively with team members and stakeholders to ensure effective communication and project success.
• Documentation: Maintain comprehensive documentation related to Azure Sentinel configurations and processes.

Technical Knowledge:

• Expertise in Azure Sentinel, Defender, and other Microsoft security tools.
• Proficiency in scripting languages such as Python or PowerShell.
• Strong knowledge of Azure security services and governance.
• Creation of Sentinel Playbooks & dashboards for platform monitoring.
• Ingesting of various types of Syslog data, Network devices via Api's etc. along with appropriate DCRs.
• Experience with device onboarding, developing SIEM content and using KQL (Kusto Query Language).
• Develop and maintain relevant custom scripts/connectors for various device integration.
• Familiarity in working & Creation of new SOC Run Books.
• Experience in other SIEM tools like ArcSight/Qradar/Splunk.
• Certifications such as Microsoft Certified: Azure Security Engineer Associate or similar.