Senior SecOps Sentinel Consultant

EY; Thiruvananthapuram; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

EY CMS-TDR Senior - Sentinel role is part of EY's cybersecurity team, focused on detecting and responding to security incidents using Sentinel SIEM, Defender EDR, and NSM solutions.

You will provide operational support, perform second-level incident validation, coordinate with clients to ensure containment, eradication, and recovery, and deliver incident reports and basic troubleshooting. The role requires 24x7 availability and strong English communication.

Qualifications

• BS or BE/ B.Tech with strong technical skills and security mindset.
• Minimum 3 years hands-on experience in SIEM/EDR/NSM.
• Certification in SIEM platforms preferred.

Responsibilities

• Operational support using SIEM Sentinel and EDR Defender.
• Specialized in second level incident validation and more detailed investigation.
• Performs incident coordination and communication with client to ensure effective containment, eradication, and recovery.
• SIEM support activities which includes adhoc reporting and basic troubleshooting.
• Advise customers on best practices and use cases on how to use this solution to achieve customer end state requirements.
• Provide near real-time analysis, investigating, reporting, remediation, coordinating and tracking of security-related activities for customer

Skills

Customer service oriented

Strong communication skills

Critical thinking

Ability to work with minimal supervise

Team collaboration

English language proficiency

Education

B.Tech./B.E.

Tools

Splunk

Azure Sentinel

CrowdStrike Falcon

ELK Stack

Defender

Fidelis XPS

ExtraHop

Nozomi Networks

Claroty

Job description

CMS-TDR Senior - Sentinel

As part of our EY-cyber security team, who shall work as Senior analyst who will assist clients in detecting and responding to security incidents with support of their SIEM, EDR and NSM solutions.

The opportunity

Were looking for Security Analyst with expertise in SIEM, EDR and NSM solutions.

Your key responsibilities

• Operational support using SIEM solutions (Sentinel), EDR ( Defender)
• Specialized in second level incident validation and more detailed investigation
• Performs incident coordination and communication with client to ensure effective containment, eradication, and recovery
• SIEM support activities which includes adhoc reporting and basic troubleshooting
• Advise customers on best practices and use cases on how to use this solution to achieve customer end state requirements.
• Provide near real-time analysis, investigating, reporting, remediation, coordinating and tracking of security-related activities for customer

Skills and attributes for success

• Customer Service oriented - Meets commitments to customers; Seeks feedback from customers to identify improvement opportunities.
• Good knowledge of SIEM technologies such as Splunk, Azure Sentinel, CrowdStrike Falcon LogScale from a Security analysts point of view
• Troubleshoot issues associated with SIEM solution.
• Ability to work with minimal levels of supervision or oversight.
• Exposure to IOT/OT monitoring (Claroty, Nozomi Networks etc.) is a plus
• Good knowledge and experience in Security Monitoring
• Good knowledge and experience in Cyber Incident Response
• Knowledge in ELK Stack
• Knowledge in Network monitoring technology platforms such as Fidelis XPS, ExtraHop
• Knowledge in endpoint protection tools, techniques, and platforms such as Defender and CrowdStrike

To qualify for the role, you must have

• B. Tech./ B.E. with sound technical skills
• Ability to work in 24x7 shifts
• Strong command on verbal and written English language.
• Demonstrate both technical acumen and critical thinking abilities.
• Strong interpersonal and presentation skills.
• Minimum 3 years of Hands-on experience in SIEM/EDR/NSM solutions
• Certification in any of the SIEM platforms
• Knowledge of RegEx, Perl scripting and SQL query language.
• Certification - CCSA, CEH, CISSP, GCIH, GIAC.