Senior SOC Analyst

JPS Tech Solutions LLC; Atlanta (GA); On-site; USD 95,000 - 125,000; Full time

Job summary

JPS Tech Solutions LLC in Atlanta, GA is seeking an Information Security Specialist to plan and coordinate security operations. This role focuses on policy development and Microsoft security products, including Sentinel, Defender, and Entra ID.

Daily duties include monitoring threats, building Sentinel workflows, and providing forensic data for investigations. You will also work with Threat Explorer, Advanced Hunting, and Exchange security configurations.

Qualifications

• Experience in information security operations and policy enforcement.
• Hands-on with Microsoft security products (Sentinel, Defender, Entra ID).
• Ability to develop playbooks and workflows.
• Familiarity with Exchange security rules.

Responsibilities

• Monitoring and remediating security alerts from Sentinel and Defender.
• Develop Sentinel workflows for automating response.
• Providing forensic data for future investigations.
• Utilizing MS Threat Explorer and Advanced Hunting for investigations.
• Configuring Exchange transport rules with respect to security events.
• Configuring Defender Tenant Block/Allow lists.

Skills

Security monitoring

Incident response

Forensics

Threat hunting

Entra ID

Microsoft Defender

Automation workflows

Tools

Microsoft Sentinel

Microsoft Defender

Exchange transport rules

Job description

Job Description Short Description:

Under general supervision, plans, directs and coordinates security operational duties in Information Technology, specifically in the field of Information Security. Develops and enforces the organization’s security policies and procedures. Description: An ideal candidate will have experience in the Microsoft security products since that’s what we’re using for now/ Microsoft Sentinel MS Defender MS Entra ID

Daily tasks entail:

• Monitoring and remediating security alerts from Sentinel and Defender
• Develop Sentinel workflows/playbooks for automating response
• Providing forensic data for future investigations
• Utilizing MS Threat Explorer and Advanced Hunting for investigations
• Configuring Exchange transport rules with respect to security events
• Configuring Defender Tenant Block/Allow lists