Soc Engineer - Microsoft Sentinel & KQL

Softify Technologies; Hyderabad; In loco; INR 1.200.000 - 1.600.000; Tempo pieno

Descrizione del lavoro

Softify Technologies in Hyderabad is seeking an experienced SOC Engineer with 4 to 6 years in a Security Operations Center. You will be the subject matter expert for our SIEM environment, focusing on Microsoft Sentinel and KQL, creating and maintaining runbooks, and tuning alerts for efficiency and fewer false positives.

Your work includes writing complex queries, automating workflows with Logic Apps/Playbooks, and collaborating with IT security teams to strengthen threat detection and incident

Competenze

• 4–6 years of experience in enterprise SOC or threat detection.
• Expertise with Microsoft Sentinel and KQL for threat hunting and alert management.
• Experience creating and structuring operational security runbooks and SOPs.

Mansioni

• Administer, manage, and optimize the Microsoft Sentinel environment.
• Design and implement KQL queries to define behavioral baselines and rules.
• Create, test, and update security runbooks and automated workflows (Logic Apps/Playbooks).
• Tune alerts to reduce false positives and improve incident response efficiency.

Conoscenze

Microsoft Sentinel

KQL

SOC operations

Threat detection

Formazione

B.E./B.Tech/BCA/B.Sc in CS/IT

Strumenti

Logic Apps

Playbooks

Descrizione del lavoro

Job Title: SOC Engineer

• Experience Required: 4 - 6 Years
• Employment Type: Full-Time, Permanent
• Department: Engineering - Software & QA / IT Security

Job Summary

We are seeking an experienced and technically sound SOC Engineer with 4 to 6 years of experience to join our Cybersecurity Operations team. The ideal candidate will serve as a subject matter expert for our SIEM environment, with strong hands-on experience in Microsoft Sentinel and KQL. You will be responsible for creating and maintaining security runbooks, managing alerts, and fine-tuning threat detection rules to maximize operational efficiency and drastically minimize false positives.

Key Responsibilities

• SIEM Management & Optimization: Administer, manage, and continuously optimize the enterprise Microsoft Sentinel environment.
• Detection Engineering: Design, write, and implement complex queries using Kusto Query Language (KQL) to establish strong behavioral baselines and threat hunting rules.
• Runbook & Playbook Automation: Create, test, and update technical security runbooks alongside automated workflows (Logic Apps/Playbooks) to ensure prompt and unified incident responses.
• Alert Tuning & False Positive Reduction: Analyze alert trends and systematically fine-tune detection rules to minimize false positives, elevate alert fidelity, and enhance overall SOC productivity.

Required Candidate Profile

• Experience: Minimum 4 to 6 years of solid experience working within an enterprise Security Operations Center (SOC) or Threat Detection team.
• Education: B.E. / B.Tech / BCA / B.Sc in Computer Science, Information Technology.
• Core Skills: Deep, demonstrable expertise with Microsoft Sentinel and advanced query authoring via KQL.
• Process Skills: Proven experience creating and structuring operational security runbooks and standard operating procedures (SOPs).
• Technical Knowledge: Thorough domain knowledge of the Microsoft technology stack, cloud infrastructure security, network protocols, and attack frameworks.