Siem Engineer

Alike Thoughts; Bengaluru; Hybrid; INR 1,800,000 - 3,000,000; Full time

Job summary

Alike Thoughts is seeking a Senior Cybersecurity Engineer to engineer, operate, and optimize Microsoft Sentinel SIEM and Defender XDR at enterprise scale. You will focus on detection engineering, threat hunting, automation, and endpoint security across the org.

Responsibilities include onboarding log sources, tuning analytics, health checks, and mentoring junior engineers. You will work with automation playbooks, Logic Apps, and Azure services to maintain robust security across platforms.

Qualifications

• Experience with Microsoft Sentinel SIEM and Defender XDR in large-scale environments.
• Strong threat hunting automation and incident support capabilities.
• Proficient in using Python and Linux for security tooling and data analysis.

Responsibilities

• Lead onboarding of log sources for Microsoft Sentinel SIEM.
• Tune analytics rules and detections aligned to MITRE ATT&CK.
• Perform Sentinel health and compliance checks and troubleshoot ingestion issues.
• Leverage Playbooks and Logic Apps for automation.
• Oversee Defender XDR onboarding of Windows, Linux, and macOS endpoints.
• Mentor junior engineers and manage product-level incidents.

Skills

Microsoft Sentinel

KQL

Advanced Hunting

Security Copilot

Python

Linux

Azure Monitoring

Automation

Threat Hunting

EndPoint Security

Tools

Syslog

CEF

APIs

Azure

Job description

Role Summary

The Senior Cybersecurity Engineer will be Responsible for engineering operating and optimizing Microsoft Sentinel SIEM and Defender XDR with focus on detection engineering threat hunting automation and endpoint security at enterprise scale.

Key Responsibilities

• Microsoft Sentinel SIEM Lead log source onboarding and Deploy tune and optimize analytics rules and detections aligned to MITRE ATTCK


• Troubleshoot ingestion parsing and normalization issues to ensure continuous log flow


• Perform Sentinel health and compliance checks


• Knowledge on automation playbooks Logic Apps Azure function apps


• Microsoft Defender XDR Manage onboarding and health of Windows Linux and macOS endpoints


• Troubleshoot sensor health connectivity onboarding failures and policy issues


• Perform EDR threat hunting Advanced Hunting KQL and support incident investigations


• Monitor and remediate endpoint compliance gaps


• Ensure security baselines support prevention compliance and stability


• CrossPlatform Security Ownership


• Working knowledge of Microsoft Defender stack MDO MDI MCAS MDC Entra ID Protection


• Mentor junior engineers and own productlevel incidents including vendor escalation and RCA

Skills Experience

• Strong handson experience with Microsoft Sentinel XDR Security Copilot


• KQL knowledge SIEM Advanced Hunting Linux OS python


• Experience with Syslog CEF APIs Azure monitoring and automation


• Exposure to enterprisescale SOC detection engineering environments


• Ownershipdriven and proactive approach


• 610 years of cybersecurity experience