Knowledge, Skills, and Abilities (KSAs)
Knowledge of:
Microsoft Sentinel architecture, SOAR, and UEBA capabilities.
Azure cloud services, Logic Apps, Azure Functions, Event Hubs, Key Vault, and Azure AD.
Security operations processes (triage, threat detection, incident response, threat modeling).
MITRE ATT&CK, NIST CSF, Zero Trust Architecture concepts.
Programming and scripting languages (Python, PowerShell, KQL, C#, JavaScript, or equivalent).
CI/CD pipelines, DevOps practices, and Git-based version control.
API integrations and JSON/YAML structures.
Skills in:
Building Logic App workflows and custom Sentinel automation playbooks.
Writing complex KQL queries for analytics, hunting, and behavioral detection.
Developing custom connectors, data maps, and parsers.
Designing and optimizing UEBA detection models.
Debugging SOAR workflows and resolving integration issues.
Communicating technical information clearly to both technical and non-technical audiences.
Abilities to:
Work independently and take ownership of complex development tasks.
Translate security requirements into scalable technical solutions.
Analyze threat behaviors and develop meaningful detections.
Work collaboratively with cybersecurity, infrastructure, and application teams.
Manage multiple work assignments and meet deadlines.
Minimum Requirements:
Required Graduation from an accredited four-year college or university with major coursework in computer science, computer information systems, software engineering, cybersecurity, or a related field.
Required Two (2) years of full-time experience in software development, cloud engineering, SIEM engineering, or cybersecurity engineering.
Required Two (2) years of full-time experience in software development, cloud engineering, SIEM engineering, or cybersecurity engineering.
Preferred Three (3) or more years of hands-on technical experience with Microsoft Sentinel.
Preferred Experience developing UEBA models, anomaly detection rules, and behavior-based analytics.
Preferred Experience building Security Automation Playbooks (SOAR).
Preferred Microsoft certifications such as: SC-200: Security Operations Analyst, AZ-900 / AZ-104, SC-100 / SC-300
Preferred Experience integrating Sentinel with EDR, IAM, firewalls, and ticketing systems.
Preferred Experience with DevOps pipelines (GitHub, Azure DevOps).
Preferred Experience working in a government, healthcare, or regulatory environment.
...At PwC, our people in business application consulting specialise in consulting services for a variety of business applications, helping... ...professional and technical standards (e.g. refer to specific PwC tax and audit guidance), the Firm's code of conduct, and independence...
...relationships, and take action to make the world a better place. OVERNIGHT SUMMER CAMP Agnes Arnold: Conroe, TX Misty Meadows:... ...and work onsite Sunday noon through Friday 6:30pm and one (1) weekend Friday 6:30pm through Saturday 5:30pm. Room and board is...
...At PwC, our people in audit and assurance focus on providing independent and objective assessments of financial statements, internal... ...professional and technical standards (e.g. refer to specific PwC tax and audit guidance), the Firm's code of conduct, and independence...
...looking for a hard working individual with a great attitude and willing to learn many new skills related to the Aerospace sheet metal fabrication industry as well as tooling control; On the job training will be provided and while experience is ideal, it is not necessary...
...jobswe offer a calling. If youre a passionate, forward-thinking physical therapist assistant (PTA) who craves more than the day-to-day,... ...to push the boundaries of whats possible in physical therapy. Feel Valued: We celebrate every victory, from the small...