Job description

The role requires strong technical hands-on in Microsoft tools (Sentinel, DLP, Endpoint) and relevant incident investigation / response skill. • Monitor security alerts and logs from SOC tools (e.g., Microsoft Sentinel, MDE). • Act as the first point of contact for security incidents and alerts. • Collaborate with remote SOC teams for incident management. • Analyse alerts generated by DLP, SIEM/ SOAR, and MDE systems • Conduct thorough reviews of security logs and alerts. • Assist internal stakeholders with security-related inquiries. • Maintain accurate documentation of incidents and actions taken. • Collaborate with L2 and L3 analysts to refine alert rules and configurations. • Stay updated on emerging threats and vulnerabilities. • Conduct training sessions on security awareness and incident reporting. • Track and report on key performance indicators (KPIs) related to security incidents. • Coordinate with departments to address security concerns. • Provide feedback for improving SOC processes and incident response protocols.

Requirements