Cyber Security Engineer

Futurism Technologies; Mhalunge; On-site; INR 1,800,000 - 3,400,000; Full time

Job summary

Futurism Technologies in Hinjewadi phase 1, Maharashtra, seeks a Cyber Security Engineer with hands-on experience in Microsoft security technologies, including Microsoft Sentinel, Defender XDR, and CSPM. The role focuses on monitoring, detection, incident response, and improving security posture for clients.

Ideal candidates have 5+ years of cyber security experience, strong knowledge of Azure security concepts, MITRE ATT&CK, and experience in writing KQL queries.

Qualifications

• 5+ years of experience in Cyber Security.
• Hands-on with Microsoft Sentinel, Defender XDR, CSPM.
• Knowledge of Azure security concepts and cloud environments.
• Experience writing KQL queries.
• Understanding MITRE ATT&CK framework; ISO 27001/NIST/CIS benchmarks.

Responsibilities

• Monitor, detect, and respond to security events.
• Improve overall security posture of the organization.
• Design and implement incident response processes and automation.
• Configure Playbooks, Workbooks, Notebooks for automated resolution.
• Manage threat hunting and threat management using MS Sentinel and Log Analytics.
• Present security findings and progress to clients.

Skills

Cyber security

Microsoft Sentinel

Defender XDR

Azure security

KQL queries

MITRE ATT&CK

Incident response

Threat hunting

SIEM/EDR

ISO/NIST/CIS

Tools

Splunk

QRadar

Azure Sentinel

Log Analytics

SOAR

ServiceNow

Job description

Job Title: Cyber Security Engineer (Microsoft Security Stack)

Experience: 5+ Years

Location: Hinjewadi phase 1

Employment Type: Full-time

Shift: 24*7 Rotaitional

Role Overview

We are looking for a skilled Cyber Security Engineer with hands-on experience in Microsoft security technologies, including Microsoft Sentinel, Defender for XDR, and Cloud Security Posture Management (CSPM). The ideal candidate will be responsible for monitoring, detection, incident response, and improving the overall security posture of the organization.

Experiance required:

• 5+years of experience in Cyber Security
• Strong hands-on experience with:
• Microsoft Sentinel (SIEM)
• Microsoft Defender XDR suite
• Microsoft Defender for Cloud (CSPM)
• Good knowledge of:
• Azure security concepts and cloud environments
• Threat detection and incident response
• Networking fundamentals and security concepts
• Experience in writing KQL queries
• Understanding of MITRE ATT&CK framework
• Familiarity with security standards (ISO 27001, NIST, CIS benchmarks)
• Designing and implementing Incident Response automation, Azure policies, Microsoft Sentinel and Azure Security.

• Implementing threat-hunting & threat-management using Microsoft Sentinel, ADX and Log Analytics.
• Designing & implementing and operating security incident management process & and platform as part of threat management.
• Implementation of Playbooks, Workbooks, Notebooks for resolution, automated resolution framework, and enforcement security.
• Enable Threat Problem Management: Aligning other parts of the security domain (IDM, IAM, Data security, etc.) with detected/discovered threats or security incidents to ensure shift-left in threat management.
• Designing & implementing infra-authentication & authorization, infrastructure automation (infra-as-code, gitops), config management Designing & and implementing policies for data encryption, data access, DB logging, and data retention.
• Designing & and implementing for secrets and key management, auto log enablement, and log aggregation for DLP/SIEM through KeyVault
• Configure and implement security use cases, playbooks, reports, and dashboards in SIEM.
• Incident Response through SIEM, EDR.
• Malware Analysis, Forensic Analysis, and Email Investigation.
• Integrating various data sources to ingest security in Log Analytics Workspace.
• To manage identities, apps, and devices securely through Microsoft Intune.
• Manage and troubleshoot the issue in Azure Sentinel, Splunk, and QRadar.
• Implementation of SOAR to automate incident response.
• Managing the Microsoft Defender for Endpoint.
• Manage security team, define and prioritize the tasks.
• To identify defensive measures and areas for improvement with MITRE att&ck framework.
• Prepare presentations and communications for the client at the management level.
• To handle and analyze the P1/P2 Security Incidents.
• Security Incident Management through ServiceNow.
• Presentation of Weekly/Monthly SOC progress report to the Customers/Clients.
• To identify the security gaps and remediate them by Defender for the cloud to minimize the security risk.
• To detect, investigate, respond, and prevent security threats by EDR Solution (MDE).
• Security incident auditing.
• Preparation of Incident response plan.
• Point of Contact for all security matters such as Security Inc.

• Experience with email security and phishing simulation tools
• Knowledge of automation (Logic Apps / SOAR playbooks)
• Exposure to vulnerability management tools
• Certifications such as:
• Microsoft SC-200 (Security Operations Analyst)
• Microsoft AZ-500 (Azure Security Engineer)
• Any SOC / Cybersecurity certification