Azure Sentinel 04 to 06 Years Mumbai - Bengaluru, India - Capgemini

Capgemini

Verified Company

Bengaluru, India

2 days ago

Posted by:

Deepika Kaur

beBee Recuiter

Description

Good knowledge of SIEM, SIEM Architecture and Hybrid Integrations.

Expertise with Azure Sentinel creating deploying Analytics Rules Playbooks Workbooks Logic Apps Log Analytics Key Vault IAM Azure AD etc
Good Knowledge of Azure DevOps GitHub On boarding various of log sources on Multitenant Platform On boarding customer Sentinel Workspace using Lighthouse or Delegated Access.
Creating and managing Azure ARM Templates to deploy Azure Sentinel and dependent Azure Services Troubleshoot issues regarding SIEM and other SOC tools.
Data archiving and backup and data purging configuration as per need and compliance Helping L2 and L1 with required knowledge base details and basic documentations
Conduct detailed analytical queries and investigations identify areas that require specific attention identify indicators of compromise IOC or events.
Investigation and develop use cases and rules to be developed into the Azure Sentinel platform Develop and improve Security.

- knowledge of IPS platforms Create and enhance internal processes and procedures Professional communications and reporting to SOC stakeholders and customers Deliver qualified information about actual threats and indications

Experience in Query language such as SQL or KQL Kusto Query Language Creation of data normalization and parsing capabilities within Log Analytics workspace Tools and Service level knowledge

- working experience in Azure Network security groups Azure AD Azure Key vaults Azure AD security Azure DDoS protection Azure Application security groups Azure Sentinel Azure CASB solution.

Primary Skills: