Cyber Security Engineer

SNP Cloud Technologies; Hyderabad; On-site; INR 800,000 - 1,200,000; Full time

Job summary

SNP Cloud Technologies is looking for a proactive Cybersecurity Engineer to join their team in Hyderabad, India. The ideal candidate will be responsible for monitoring and triaging threats to ensure client security using environments like Microsoft Defender. Responsibilities include incident response for phishing and ransomware, health monitoring of security sensors, and vulnerability management. Candidates should have hands-on experience with Microsoft Defender and possess skills in KQL querying along with basic networking knowledge.

Qualifications

• Hands-on experience with Defender for Endpoint and Defender for Office 365.
• Ability to write basic to intermediate KQL queries.
• Understanding of TCP/IP, DNS, and common attack vectors.
• Familiarity with MFA troubleshooting and Self-Service Password Reset flows.

Responsibilities

• Monitor the Microsoft Sentinel queue and triage threats.
• Investigate alerts related to Phishing, Ransomware, and Identity Compromise.
• Perform daily/weekly health checks on security sensors.
• Assist in running and reporting on vulnerability scans.
• Propose tuning adjustments to reduce alert fatigue.

Skills

Microsoft Defender Suite

KQL querying

Networking Basics

Identity Basics

Job description

Cybersecurity Engineer

SNP is seeking a proactive Security Engineer to join our cybersecurity team. In this role, they will be first line of defense for our managed service clients, responsible for monitoring, triaging, and remediating high-fidelity threats. Environments will have Microsoft Defender and Sentinel ecosystem to ensure our clients' environments remain resilient against 24/7 threats.

Key Responsibilities

• SOC Operations: Monitor the Microsoft Sentinel queue and Defender 365 incidents, performing triage and initial containment of threats (e.g., isolating devices, suspending users).
• Incident Response: Investigate alerts related to Phishing, Ransomware, and Identity Compromise, documenting findings in the case management system.
• Health Monitoring: Perform daily/weekly health checks on security sensors (e.g., ensure Defender for Endpoint sensors are active and reporting).
• Vulnerability Management: Assist in running and reporting on vulnerability scans using Defender Vulnerability Management (TVM).
• Rule Tuning: Identify noisy alerts (false positives) and propose tuning adjustments to the Senior Engineering team to reduce alert fatigue.

Technical Skills (Must Have)

• Microsoft Defender Suite: Hands-on experience with Defender for Endpoint (MDE) and Defender for Office 365 (MDO).
• Querying: Ability to write basic to intermediate KQL queries to search logs and hunt for threats.
• Networking Basics: Understanding of TCP/IP, DNS, and common attack vectors (e.g., Pass-the-Hash, SQL Injection).
• Identity Basics: Familiarity with MFA troubleshooting and Self-Service Password Reset (SSPR) flows.

Certifications (Preferred)

• Microsoft Certified: Security Operations Analyst Associate (SC-200)