Principal Cybersecurity & IT Compliance_103209

MyCareernet; Bengaluru; On-site; INR 1,500,000 - 2,100,000; Full time

Job summary

MyCareernet in Bengaluru, India, is seeking a skilled SOC professional to join our security operations center. You will investigate cloud security alerts, tune detections, and coordinate containment for EDR/XDR incidents across AWS and Microsoft Defender environments.

The role requires 5-7 years in SOC/IR, hands-on AWS security experience, and strong SIEM skills with Microsoft Sentinel. You will contribute to runbooks, dashboards, and security improvements in a dynamic team.

Qualifications

• 5-7 years of experience in SOC operations, incident response, cloud security.
• Hands-on experience with AWS security services and cloud investigation workflows.
• Strong working knowledge of Microsoft Sentinel, Defender XDR, and SIEM-based alert investigation.

Responsibilities

• Investigate AWS security alerts and cloud misconfigurations using AWS logs and security services.
• Tune detections in Microsoft Sentinel to improve alert quality and reduce false positives.
• Handle EDR/XDR alerts in Microsoft Defender XDR, including containment and remediation coordination.
• Support AI security monitoring, identify data leakage risks and prompt injection concerns.
• Document incident timelines, findings, and lessons learned; contribute to runbooks and dashboards.

Skills

SOC operations

Incident response

Cloud security

SIEM engineering

EDR/XDR operations

Education

Bachelor's degree in Computer Science or equivalent

Job description

Key Skills

AWS, Microsoft Defender, AI Security, Sentinel, SIEM, Powershell, Incident Response

Roles and Responsibilities

• Investigate AWS security alerts, suspicious activity, and cloud misconfigurations using native AWS logs and security services.
• Monitor and tune detections in Microsoft Sentinel and related SIEM workflows to improve alert quality and reduce false positives.
• Handle EDR/XDR alerts in Microsoft Defender XDR, including endpoint triage, IOC validation, containment support, and remediation coordination.
• Support AI security monitoring by identifying misuse scenarios, data leakage risks, prompt injection concerns, and operational guardrails.
• Document incident timelines, findings, containment actions, and lessons learned while contributing to runbooks, dashboards, and detection improvements.

Skills Required

• 5-7 years of experience in SOC operations, incident response, cloud security, SIEM engineering, or EDR/XDR operations.
• Hands-on experience with AWS security services and cloud investigation workflows.
• Strong working knowledge of Microsoft Sentinel, Microsoft Defender XDR, and SIEM-based alert investigation.
• Ability to analyze logs, correlate events, and support incident response across cloud and endpoint environments.
• Practical scripting or query capability using KQL, PowerShell, or Python for investigation and operational support.

Good to Have

• Microsoft Security Copilot, SOAR platforms, threat intelligence workflows, and cloud security certifications.

Education

B.E. in Computer Science or equivalent technical degree.