Azure Sentinel Architect (SIEM Implementation) – Job Description

The core responsibility is to perform triage, analysis and investigations in response to security alerts, which includes analysis of the logs, digital forensics and data analytics using Azure Sentinel. In addition to identifying trends to assist other orgs with remediation of possible security issues within a product or service. Responsible for fusing multiple sources of evidence to determine how a security incident occurred and what steps need to transpire to remediate it. Responsible for building capabilities that close information gaps, strengthen our cloud defenses and defend customers from emerging security threats.

Responsibility includes:

•    Experience in Analyzing the existing infrastructure environment and come up with the integrations with SIEM/SOAR solutions

•    Ability to design the SIEM/SOAR solutions for the cloud security operations (SOC)

•    Experience in integration with Data collectors along with various data sources to Azure Sentinel using various data connectors etc..

•    Experience in Implementation of Azure Sentinel for the security logs monitoring and analysis

•    Able to identify the key logs integration with Azure Sentinel and helps in implementing the integrations with various data sources (Servers, DBs, IAM infrastructure, Network infrastructure etc..).

•    Able to triage the Security incidents and Alerts coming into the Azure Sentinel solution and come up with the investigation models to fix the alerts and incidents

•    Develops security software, including tools for monitoring, traffic analysis, intrusion detection, virus/spyware/malware detection, anti-virus software, and so on.

•    Prepare and document standard operating procedures and protocols

•    Configure and troubleshoot security infrastructure devices

Non-Technical

•    Problem-solving mentality leveraging internal and/or external resources.

•    Strong written and oral communication skills

Technologies

Azure Sentinel, Azure Cloud, Azure AD, On-Prem infrastructure

Platforms: Linux, Windows

Language

Local Dutch(C1/C2 proficiency in reading, wring & speaking) with good English proficiency

-

-

Wensen

-

-

-

Competenties

-

-

-

Aanvullende informatie

-Cv must be max 5 pages, and the Name, domicile and phone number of the candidate must be presented.

-Information must be shared about the date and timeslots in the 4 days after the introduction of the candidate on which the tech team of TCS can call the candidate for a short interview. The results of that interview are used to

 decide if the candidate will be introduced to the client of TCS.