Website:
nextgenidentity.com.au
Job details:
🚀 We're Hiring: Microsoft Sentinel Security Engineer | NextGen Identity
📍 Location: Bengaluru (On-site)
💼 Experience: 5+ Years
⏳ Availability: Immediate Joiners Preferred
Role: Microsoft Sentinel Security Engineer
We're looking for an experienced Microsoft Sentinel Security Engineer to design, implement, and manage Microsoft Sentinel environments for enterprise security operations. The ideal candidate will have strong hands-on expertise in Microsoft Sentinel, SIEM, threat detection, incident response, and security automation within the Microsoft Security ecosystem.
⭐ Must-Have Skills (Highest Priority)
We are specifically looking for candidates with:
- ✅ Strong hands-on experience with Microsoft Sentinel
- ✅ Hands-on experience designing and implementing Microsoft Sentinel Playbooks (Logic Apps)
- ✅ Experience configuring and managing analytics rules, data connectors, workbooks, and incident response workflows
- ✅ Strong knowledge of SIEM operations, threat detection, and security monitoring
Candidates with practical implementation experience in Microsoft Sentinel and Logic Apps will be given strong preference.
Key Responsibilities
- Design, configure, implement, and maintain Microsoft Sentinel environments.
- Configure and manage data connectors, Analytics Rules, Playbooks (Logic Apps), Workbooks, Watchlists, and Incident Management workflows.
- Monitor security alerts, investigate incidents, perform root cause analysis, and support remediation activities.
- Tune detection rules and analytics to reduce false positives and improve threat detection capabilities.
- Integrate Microsoft Sentinel with enterprise security and IAM platforms such as Microsoft Defender, Azure Monitor, Microsoft Entra ID (Azure AD), Saviynt, Okta, Ping Identity, and CyberArk.
- Develop KQL queries, dashboards, PowerShell scripts, and automation workflows to improve security operations.
- Build and maintain operational documentation, architecture diagrams, and implementation runbooks.
- Collaborate with security architects, clients, and cross-functional cybersecurity teams to deliver scalable SIEM solutions.
- Support continuous improvement of monitoring, detection, automation, and incident response processes.
Required Skills & Experience
- Minimum 5+ years of experience in Cyber Security, SIEM, SOC, or Security Operations.
- Strong hands-on expertise in Microsoft Sentinel implementation, configuration, administration, and troubleshooting.
- Proven experience developing and maintaining Microsoft Sentinel Playbooks (Logic Apps).
- Experience with Microsoft Security technologies including:
- Microsoft Defender
- Azure Monitor
- Azure Security Center / Microsoft Defender for Cloud
- Log Analytics
- Strong understanding of SIEM concepts, threat detection, incident response, log analysis, and security monitoring.
- Hands-on experience with:
- KQL (Kusto Query Language)
- PowerShell
- Azure CLI
- Security automation
- Knowledge of Identity & Access Management (IAM) concepts and integrations with platforms such as Saviynt, Okta, Ping Identity, Microsoft Entra ID (Azure AD), and CyberArk.
- Excellent analytical, troubleshooting, documentation, and communication skills.
Nice to Have
Candidates with experience in the following will have an added advantage:
- Experience with GitHub Actions or other CI/CD technologies
- Experience with Python, PowerShell, JavaScript, or similar scripting/programming languages
- Experience using Visual Studio Code (VS Code) and GitHub Copilot
- Familiarity with infrastructure automation and DevSecOps practices
- Microsoft Security certifications such as SC-200, SC-300, AZ-500, or equivalent
Why Join Us?
- Work with a talented and collaborative Cyber Security & IAM team.
- Opportunity to work on enterprise-scale Microsoft Security and SIEM implementations.
- Exposure to cutting-edge cloud security, automation, DevSecOps, and Identity Security technologies.
- Continuous learning, certification support, and excellent career growth opportunities.
Click on Apply to know more.
