Security Analyst - L1

Noventiq India, Ltd.; Bengaluru; On-site; INR 1,500,000 - 2,100,000; Full time

Job summary

Noventiq India, Ltd. in Bengaluru invites an Azure Sentinel SME - L1 to join the security team. You will implement and maintain Azure Sentinel, guide customers on security best practices and help ensure a secure, compliant infrastructure.

The role requires hands-on SIEM engineering, integration of devices, and collaboration with SOC. Strong communication and vendor relations are essential; certifications in Defender products are a plus.

Qualifications

• Should have done SIEM Engineering activities.
• Hands on experience configuring, managing, and maintaining the Microsoft Sentinel SIEM platform including log management and retention configurations.
• Monitor, analyze, investigate and respond to security incidents in MS Sentinel by collaborating with the SOC team and customers.
• Integrate/onboard devices (Linux, Palo Alto, Fortinet, Windows) to Azure Sentinel.
• Expertise in integrating data sources not supported by Sentinel OOB. Custom parser development and issue resolution in Sentinel.
• Troubleshoot and resolve issues related to SIEM (Sentinel) infrastructure and integrations.
• Create integration documents and send them to customers as required.
• Strong knowledge of Microsoft Defender products.
• Generate and review weekly/monthly reports to provide insights on security posture.
• Act as single point of contact for the client during integration or incident issues.

Responsibilities

• SIEM Engineering activities and proactive security monitoring.
• Onboarding and integration of devices and data sources to Sentinel.
• Collaborate with SOC to analyze incidents and improve detection.
• Create customer-facing integration documentation and reports.
• Provide guidance on Defender product usage and security best practices.
• Serve as the primary client liaison for integration and incident resolution.

Skills

Azure Sentinel

SIEM engineering

Log management

Incident response

KQL queries

Playbooks

Workbooks

Microsoft Defender

Logic Apps

Vendor relations

Tools

Palo Alto

Fortinet

Linux

Windows

Logic Apps

Azure cloud

Job description

Noventiq is hiring! Noventiq (Noventiq Holdings PLC) is a leading global solutions and services provider in digital transformation and cybersecurity, headquartered in London. The company enables, facilitates, and accelerates digital transformation for its customers’ businesses, connecting 80,000+ organizations across all sectors with a vast selection of best-in-class IT vendors, alongside its own services and solutions. Noventiq delivered record gross revenue of $1.6 billion for the 12 months to March 31, 2023, an increase of 52% in constant currency. The company’s growth is underpinned by its three-dimensional strategy to expand its markets, portfolio, and sales channels. The strategy is supported by an active approach to M&As which enables Noventiq to take advantage of the ongoing consolidation in the industry. Noventiq's 6,400 employees work in approximately 60 countries throughout Asia, Latin America, Europe, Middle East, and Africa—markets with significant growth potential.

• One of the largest SI’s in India with revenue close to 700M$ and growing to 900M$.
• 3500+ Employees in India for India.
• Total 28 Offices in India across North, South, West & East.
• 1000+ Resident Engineers across India.
• 2500+ technical resources in India for India.
• Technology partnerships with Top 3 Cloud Solution Providers, Top 3 Infrastructure companies, Top 10 Cybersecurity companies.
• Enviable customer base: 4 of Top 5 Banks, 3 of Top 5 IT companies, 3 of Top 5 BPO’s, 3 of Top 5 Pharma companies.
• Largest partner to Microsoft with combined infeed of US$600M about 25% of Microsoft India revenues www.noventiq.com
• Account management experience / Direct Sales in Microsoft, VMWare, Citrix, Symantec, Adobe, McAfee, Ubuntu, Hitachi, Oracle etc. products and solutions.
• Experience in solution & consultative sales of IT & Network Services like Hosted Application, Mail Messaging, Managed IT and network services Contact center / IT Infrastructure management tools / Telecom data services.
• Experience in handling Govt/PSU accounts / Account management and technical sales.
• Communicates effectively verbally including excellent presentation skills, (experience of presenting to large audiences e.g. seminars an advantage); communicates clearly in writing; strong relationship building skills.
• Must be target oriented, self-starter and aggressive enough to achieve the defined targets.
• Creative thinking ‘outside of the box’
• the candidate must have strong relationships with vendors, partners, and OEMs.

About You

We are seeking highly skilled and motivated Azure Sentinel SME - L1 to join our team. As an Azure Sentinel SME, you will be responsible for implementing and maintaining security measures in Azure Sentinel. You will work closely with different type of customers to provide guidance on security best practices and play a crucial role in maintaining a secure and compliant infrastructure.

Must Have

What you ‘ll do:

• Should have done SIEM Engineering activities.
• Hands on Experience to Configure, manage, and maintain the Microsoft Sentinel SIEM platform including log management, retention configurations, maintenance of logs at low cost.
• Monitor, analyze, investigate and respond to security incidents in MS Sentinel by collaborating with the SOC team and Customers.
• Should be able to Integrate/onboard devices (Linux, Palo Alto, Fortinet, windows and other devices etc.) to Azure sentinel
• Should have expertise in integrating data sources which are not supported by Sentinel tool OOB. Custom parser development and ability to solve technical issues in Sentinel.
• Troubleshoot and resolve issues related to SIEM (Sentinel) infrastructure and integrations like logs not reporting to Sentinel.
• Creation of integration documents and sending them to customers as per requirement.
• Strong Knowledge of different Microsoft Defender products
• Generate and review Weekly/Monthly reports to provide insights on security posture and SIEM effectiveness to Customers
• Regularly review use case performance and keep track of any fine tuning done to use cases including identifying scenarios where fine tuning can be done and effectively communicate to customer/internal for fine tuning.
• Act as single point of contact for the client during any issues of Integration or Incidents.

Good To Have

• Creation and Fine Tuning in Custom KQL queries and functions for complex detection and monitoring Requirements.
• Knowledge of Workbooks creation,
• Building Playbooks (Enrichment and Response) in Sentinel automation through logic apps.
• Preference should be given to candidates who have completed expert training and certifications in Sentinel and Defender products of Microsoft.

Important Criteria

• Strong communication, collaboration and multi-tasking skills to work effectively with cross-functional teams and stakeholders.
• Relevant professional certifications such as: AZ-900, SC-900, SC-200, Certified Ethical Hacker (CEH) or any other SIEM Engineering certification.
• Stay updated with the latest trends and developments in SIEM technologies and cybersecurity threats and utilize it in System if required.

Location: Bangalore - NQIND, Bangalore, Karnataka, India