L1, Security Operations Center (SOC)

SUMMARY

Role: Threat investigation & analysis, and incident response using client IRP

Key Responsibilities

• Perform investigation and correlation of alerts in Microsoft Sentinel.
• Conduct threat hunting and root cause analysis across endpoint, network, and identity logs.
• Lead incident response and containment actions for confirmed security incidents.
• Develop and optimize Sentinel analytics rules, KQL queries, and automation playbooks (SOAR)
• Provide technical guidance to L1 analysts and support escalation handling.
• Produce incident reports and recommend security improvements and detection enhancements.

Ideal Profile

• 3–6 years experience in SOC operations or incident response.
• Strong experience with Microsoft Sentinel, KQL, and log correlation.
• Knowledge of MITRE ATT&CK, threat hunting, and digital forensics concepts.

*Only shortlisted candidates will be notified*