Platform Analyst III - Cyber Security

V2 Solutions; Bengaluru; On-site; INR 1,800,000 - 3,000,000; Full time

Job summary

CyberProof, part of the UST Global family, seeks a Use Case Management Engineer / Azure Sentinel SIEM Engineer to join a global Security Operations Team in Bengaluru. You will develop new Sentinel use cases, design architectures, and guide customers in sizing and deployment, ensuring robust detection and incident response capabilities.

Ideal candidates have 5+ years in a similar role, strong KQL skills, certifications, and a deep understanding of MITRE ATT&CK mappings and security monitoring

Qualifications

• Minimum 5 years of experience in a similar role.
• Experience with Sentinel SIEM platform.
• Strong hands-on experience in KQL with writing Use Cases in Sentinel.
• University degree in information security or equivalent work experience.
• Relevant certifications (e.g., GIAC GSOC, GCFA, CISSP) is an advantage.

Responsibilities

• Understand customer requirements and recommend best practices related to Sentinel solution.
• Offer consultative advice on security principles and best practices related to Sentinel operations.
• Develop Sentinel use cases, rules, correlations, dashboards to meet customer needs.
• Design and document Sentinel architectures to meet customer needs.
• Assist customer with Sentinel sizing, architectures, and client technical meetings.
• Deploy and configure Sentinel platforms per vendor guidelines and best practices.
• Assist client with technical guidance to configure end log sources in-scope to be logged to Sentinel.
• Ensure all use cases and playbooks are well-documented with detailed descriptions and configurations.
• Verify data of log sources in Sentinel.

Skills

Analytical thinking

Problem-solving

Communication skills

Self-motivation

Education

Bachelor's degree in information security or equivalent

Tools

Azure Sentinel

KQL

SIEM platforms

Job description

Use Case Management Engineer / Azure Sentinel SIEM Engineer / Cybersecurity Expert

CyberProof is a cyber security services and platform company whose mission is to help our customers react faster and smarter - and stay ahead of security threats, by creating secure digital ecosystems. CyberProof automates processes to detect and prioritize threats early and respond rapidly and decisively. CyberProof is part of the UST Global family. Some of the world s largest enterprises trust us to create and maintain secure digital ecosystems using our comprehensive cyber security platform and mitigation services.

We are looking for a Azure Sentinel SIEM Engineer in the Use Case Management team to join us and become a member of our global Security Operations Team.

Main Tasks and Accountabilities:

• Understand customer requirements and recommend best practices related to Sentinel solution.
• Offer consultative advice on security principles and best practices related to Sentinel operations.
• Developing new Sentinel use cases, rules, correlations, dashboards to meet the customer needs.
• Design and document Sentinel architectures to meet the customer needs.
• Assist customer with Sentinel sizing, architectures, and client technical meetings.
• Deploy and configure Sentinel platforms as per Vendor guidelines and industry Best Practices.
• Assist client with technical guidance to configure end log sources in-scope to be logged to the Sentinel.
• Ensure all use cases and playbooks are well-documented, including detailed descriptions, workflow diagrams, and relevant technical configurations.
• Verification of data of log sources in the Sentinel.

Mandatory Requirements:

• Experience with Sentinel SIEM platform.
• The person can have prior experience in other common SIEM platforms as well, but recent role needs to be with Sentinel as the role is expected to work primarily in this platform.
• Minimum of 5 years of experience in a similar role.
• Preferred SIEM vendor certification of administrator.
• Strong hands-on experience in KQL with writing Use Cases in Sentinel.
• Familiarity with different security attack vectors and means of protection.
• Knowledge of common attack frameworks such as MITRE ATTCK, TTPs, and how they are mapped to detection rules.
• Familiarity with security monitoring, incident detection, and incident response best practices.
• Strong analytical and problem-solving skills.
• Strong communication and collaboration skills, with the ability to work effectively in a team environment.
• Ability to work independently; self-starter/self-motivated.
• University degree in information security or equivalent work experience.
• Relevant certification (e.g., GIAC GSOC, GCFA, CISSP) is an advantage.

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.