SIEM Sentinel

Coforge; India; On-site; INR 1,000,000 - 3,000,000; Full time

Job summary

Coforge is seeking a senior security operations expert to lead 24x7 SOC activities, monitor alerts, triage incidents, and drive remediation across complex environments.

The role requires hands-on experience with Azure Sentinel, Defender for O365, SIEM/SOAR, and strong coordination of teams to meet security KPIs and regulatory standards.

Qualifications

• Hands-on experience in 24x7 SOC operations with alert handling and incident triage.
• Deep understanding of cyber security, EDR, phishing analysis, and MSSP delivery.
• Experience in delivering security operations from an MSSP environment.
• Ability to manage staffing, budget, shift scheduling, and technology strategy to meet SLAs.
• Organizational point of contact for business-critical incidents.

Responsibilities

• Oversees and coordinates 24x7 security operations within an organization.
• Implements security policies and collaborates with other departments to ensure a strong security posture.
• Suggests detective and preventive controls based on latest cybersecurity trends.
• Establishes SOC KPIs and drives performance improvements.
• Provides Tier 2 SOC support and incident investigation.

Skills

Azure Sentinel

Defender for O365

Log Analysis

Incident Response

Shift Lead

SOC Operations

Threat Monitoring

Policy Compliance

NIST Framework

MITRE ATT&CK

EDR

Education

CISSP

GCIH

AZ-900

SC-200

AZ-500

Tools

MS Certifications AZ-900

SC-200

AZ-500

Job description

Job description

• Strong hands-on experience with Azure Sentinel and Microsoft Defender for O365.
• Understanding of security events and situations in Azure Sentinel and MS defender.
• Understanding of sentinel services, SOAR and implementing.
• Identifying potential threats and performing enhancements to existing cyber security measures as per specifications or policy guidelines.
• Hands on experience working in 24*7 SOC operations, handling security alerts, Incident triage and investigation, providing SOC Tier 2 support.
• Good understanding of Cyber security, EDR, Phishing analysis etc.
• Responsibilities include cyber threat analysis support and recommending appropriate remediation and mitigation.
• Oversees and coordinates 24*7 security operations within an organization.
• Deep expertise in delivering security operations from a MSSP.
• Manage personnel/staffing, budget, shift scheduling and technology strategy to meet SLAs.
• Serves as organizational point person for business-critical incidents.
• Strong understanding of the SOC KPIs, establish SOC performance goals and priorities.
• Manages security teams, monitors threat, implements security policies, and collaborates with other departments to ensure a comprehensive security posture.
• Suggests detective and preventive controls to the organizations in helping them become cyber aware, has knowledge of the latest cybersecurity trends.
• Understanding of the cybersecurity framework such as NIST, MITRE ATT&CK(attack lifecycle management).

Tools/Skills: Log Analysis, Incident Response, Incident Handler, Shift Lead, Azure Sentinel, Defender for O365

Certifications(Good to have): CISSP,GCIH,MS Certifications AZ-900 and SC-200 / AZ-500 etc