Senior Sentinel Security Consultant

EY; Thiruvananthapuram; On-site; INR 2,500,000 - 4,000,000; Full time

Job summary

EY is seeking a CMS-TDR Senior to join its cyber security team in Thiruvananthapuram. The role focuses on Microsoft Sentinel solutions, cloud security monitoring, and acting as a subject matter expert for cloud security deployments.

You will architect, implement, and optimize Sentinel-based monitoring, guide customers through pilots to production, and develop automated event monitoring playbooks to strengthen security postures.

Qualifications

• B. Tech./ B.E. with sound technical skills.
• Strong command on verbal and written English.
• Demonstrate both technical acumen and critical thinking abilities.
• Strong interpersonal and presentation skills.
• Azure certification (any cloud vendor cert is a plus).

Responsibilities

• Architecting and implementation of cloud security monitoring platforms MS Sentinel.
• Provide consulting to customers during testing, evaluation, pilot, production, and training phases for successful deployment.
• Serve as SME on Cloud Security solutions for the customer and use capabilities in daily operations.
• Secure cloud environments by applying cybersecurity tools and best practices.
• Advise customers on best practices and use cases to meet end-state requirements.
• Develop content for automated security event monitoring and alerting with event response playbooks.

Skills

MS Sentinel expertise

Threat modelling

Azure platform security

Scripting (Python, Bash, PowerShell)

Cloud security consulting

Customer-facing communication

Education

B.Tech./B.E.

Tools

MS Sentinel

Job description

Job Summary

CMS-TDR Senior

As part of our EY-cyber security team, who shall work as SME for Microsoft Sentinel solutions in TDR team

The opportunity

Were looking for Senior Consultant with expertise in Cloud Security solutions. This is a fantastic opportunity to be part of a leading firm whilst being instrumental in the growth of a new service offering.

Your key responsibilities

• Architecting and implementation of cloud security monitoring platforms MS Sentinel
• Provide consulting to customers during the testing, evaluation, pilot, production, and training phases to ensure a successful deployment.
• Perform as the subject matter expert on Cloud Security solutions for the customer, use the capabilities of the solution in the daily operational work for the end customer.
• Securing overall cloud environments by applying cybersecurity tools and best practices
• Advise customers on best practices and use cases on how to use this solution to achieve customer end state requirements.
• Content development which includes developing process for automated security event monitoring and alerting along with corresponding event response plans for systems

Skills and attributes for success

• Customer Service oriented - Meets commitments to customers; Seeks feedback from customers to identify improvement opportunities.
• Expertise in content management in MS Sentinel
• Good knowledge in threat modelling. Experience in creating use cases under Cyber kill chain and Mitre attack framework
• Expertise in integrating critical devices/applications including unsupported (in-house built) by creating custom parsers
• Below mentioned experiences/expertise on Sentinel
• Develop a migration plan from Splunk/QRadar/LogRhythm to MS Sentinel
• Deep understanding of how to implement best practices for designing and securing Azure platform
• Experiencing advising on Microsoft Cloud Security capabilities across Azure platform
• Configure data digestion types and connectors
• Analytic design and configuration of the events and logs being digested
• Develop, automate, and orchestrate tasks(playbooks) with logic apps based on certain events
• Configure Sentinel Incidents, Workbooks, Hunt queries, Notebooks
• Experience in other cloud native security platforms like AWS and GCP is a plus
• Scripting knowledge (Python, Bash, PowerShell)
• Extensive knowledge of different security threats
• Good knowledge and experience in Security Monitoring
• Good knowledge and experience in Cyber Incident Response

To qualify for the role, you must have

• B. Tech./ B.E. with sound technical skills
• Strong command on verbal and written English language.
• Demonstrate both technical acumen and critical thinking abilities.
• Strong interpersonal and presentation skills.
• Certification in Azure (any other cloud vendor certification is a plus)

Ideally, youll also have

• People/Project management skills