Security Analyst - L2

Noventiq India, Ltd.; Bengaluru; On-site; INR 1,500,000 - 2,200,000; Full time

Job summary

Noventiq India, Ltd. in Bengaluru invites an experienced Azure Sentinel SME to implement and maintain security measures in Azure Sentinel. You will collaborate with customers to guide security best practices and play a key role in maintaining a secure, compliant infrastructure.

The candidate should have hands-on SIEM engineering experience, device onboarding, and proficiency with Microsoft Defender products, with strong communication skills for cross-functional teams.

Qualifications

• Strong knowledge of Azure Sentinel SIEM platform and Defender products.
• Experience with SIEM engineering, log management, and incident response.
• Ability to onboard devices (Linux, Windows, Palo Alto, Fortinet) to Azure Sentinel.
• Development of custom parsers and use-case tuning.
• Excellent communication and cross-functional collaboration.

Responsibilities

• Configure and maintain Azure Sentinel SIEM environment.
• Monitor, analyze, investigate, and respond to security incidents.
• Integrate data sources not natively supported and create integration docs.
• Create and review security reports for customers.
• Serve as single point of contact for clients during incidents.

Skills

Azure Sentinel

SIEM Engineering

Security Monitoring

Log management

Incident response

Device onboarding

Custom parsers

Defender products

Education

Azure Sentinel / Defender certifications

Tools

Azure Sentinel

Logic Apps

Workbooks

KQL

Job description

Noventiq is hiring! Noventiq (Noventiq Holdings PLC) is a leading global solutions and services provider in digital transformation and cybersecurity, headquartered in London. The company enables, facilitates, and accelerates digital transformation for its customers’ businesses, connecting 80,000+ organizations across all sectors with a vast selection of best-in-class IT vendors, alongside its own services and solutions. Noventiq delivered record gross revenue of $1.6 billion for the 12 months to March 31, 2023, an increase of 52% in constant currency. The company’s growth is underpinned by its three-dimensional strategy to expand its markets, portfolio, and sales channels. The strategy is supported by an active approach to M&As which enables Noventiq to take advantage of the ongoing consolidation in the industry. Noventiq's 6,400 employees work in approximately 60 countries throughout Asia, Latin America, Europe, Middle East, and Africa—markets with significant growth potential.

• One of the largest SI’s in India with revenue close to 700M$ and growing to 900M$.
• 3500+ Employees in India for India.
• Total 28 Offices in India across North, South, West & East.
• 1000+ Resident Engineers across India.
• 2500+ technical resources in India for India.
• Technology partnerships with Top 3 Cloud Solution Providers, Top 3 Infrastructure companies, Top 10 Cybersecurity companies.
• Enviable customer base: 4 of Top 5 Banks, 3 of Top 5 IT companies, 3 of Top 5 BPO’s, 3 of Top 5 Pharma companies.
• Largest partner to Microsoft with combined infeed of US$600M about 25% of Microsoft India revenues www.noventiq.com
• Account management experience / Direct Sales in Microsoft, VMWare, Citrix, Symantec, Adobe, McAfee, Ubuntu, Hitachi, Oracle etc. products and solutions.
• Experience in solution & consultative sales of IT & Network Services like Hosted Application, Mail Messaging, Managed IT and network services Contact center / IT Infrastructure management tools / Telecom data services.
• Experience in handling Govt/PSU accounts / Account management and technical sales.
• Communicates effectively verbally including excellent presentation skills, (experience of presenting to large audiences e.g. seminars an advantage); communicates clearly in writing; strong relationship building skills.
• Must be target oriented, self-starter and aggressive enough to achieve the defined targets.
• Creative thinking ‘outside of the box’
• the candidate must have strong relationships with vendors, partners, and OEMs.

About You

We are seeking highly skilled and motivated Azure Sentinel SME - L2 to join our team. As an Azure Sentinel SME, you will be responsible for implementing and maintaining security measures in Azure Sentinel. You will work closely with different type of customers to provide guidance on security best practices, and play a crucial role in maintaining a secure and compliant infrastructure.

What you ‘ll do:

• Should have done SIEM Engineering activities.
• Hands on Experience to Configure, manage, and maintain the Microsoft Sentinel SIEM platform including log management, retention configurations, maintenance of logs at low cost.
• Monitor, analyze, investigate and respond to security incidents in MS Sentinel by collaborating with the SOC team and Customers.
• Should be able to Integrate/onboard devices (Linux, Palo Alto, Fortinet, windows and other devices etc.) to Azure sentinel.
• Should have expertise in integrating data sources which are not supported by Sentinel tool OOB. Custom parser development and ability to solve technical issues in Sentinel.
• Troubleshoot and resolve issues related to SIEM (Sentinel) infrastructure and integrations like logs not reporting to Sentinel.
• Creation of integration documents and sending them to customers as per requirement.
• Strong Knowledge of different Microsoft Defender products
• Generate and review Weekly/Monthly reports to provide insights on security posture and SIEM effectiveness to Customers
• Regularly review use case performance and keep track of any fine tuning done to use cases including identifying scenarios where fine tuning can be done and effectively communicate to customer/internal for fine tuning.
• Act as single point of contact for the client during any issues of Integration or Incidents.

Good To Have

• Creation and Fine Tuning in Custom KQL queries and functions for complex detection and monitoring

Requirements

• Knowledge of Workbooks creation,
• Building Playbooks (Enrichment and Response) in Sentinel automation through logic apps.
• Preference should be given to candidates who have completed expert training and certifications in Sentinel and Defender products of Microsoft.

Important Criteria

• Strong communication, collaboration and multi-tasking skills to work effectively with cross-functional teams and stakeholders.
• Relevant professional certifications such as: AZ-900, SC-900, SC-200, Certified Ethical Hacker (CEH) or any other SIEM Engineering certification.
• Stay updated with the latest trends and developments in SIEM technologies and cybersecurity threats and utilize it in System if required.

Location: Bangalore - NQIND, Bangalore, Karnataka, India