What are the responsibilities and job description for the Microsoft Azure Sentinel SIEM Engineer position at TechWish?
Job Description
- Experience with Microsoft Cloud Security Technologies such as Azure Sentinel, Microsoft Defender, MDE, ATP, Azure Data Explorer and Azure Log Analytics or similar products like ArcSight, Splunk and Logstash
- Expert in Kusto Query Language (KQL)
- Expert-level, hands-on Log Analytics engineer with experience in complex environments
- Deep knowledge of other SIEM platforms, such as Splunk, QRadar, or Arcsight
- Previous experience in applying knowledge to uncover threats based on log data within Cloud Service Provider (CSP) environments (Azure AAD, Azure Resources, Event logs, etc.) to build, analyze, and tune detections.
Need to provide professional services deeply in Azure Log Analytics with focus on Kusto Query Language (KQL). The resource will collaborate with technical and business teams as
needed to determine any deficiencies and ensure continuous improvement as well as take part in any related agile or traditional development engagements