Technical Specialist-Cybersecurity

Area(s) of responsibility

Key Responsibilities:

• Monitor and analyze security alerts from Microsoft Sentinel, Microsoft Defender for Endpoint, and other Security tools.
• Perform triage, investigation, and escalation of security incidents and Conduct root cause analysis and recommend remediation actions.
• Administer and maintain Microsoft Sentinel, including workspace configuration, data connector setup, and log ingestion from various sources.
• Manage analytic rules, automation playbooks, and incident workflows to ensure effective threat detection and response.
• Perform regular health checks, updates, and audits of Sentinel configurations to maintain operational integrity.
• Collaborate with IT and cloud teams to implement security controls and improve detection capabilities.
• Create and maintain playbooks and runbooks for incident response procedures.