SIEM Sentinel Architect in UST Ukraine

SIEM Sentinel Architect

віддалено

Our client is a cyber security services and platform company whose mission is to help the customers react faster and smarter — and stay ahead of security threats, by creating secure digital ecosystems. They automate processes to detect and prioritize threats early and respond rapidly and decisively.

We are looking for a SIEM Sentinel Architect for our Use Case Factory team to join us and become a member of our global Security Operations Team.

Main Tasks and Accountabilities:

• Understand customer requirements and recommend best practices related to Sentinel

solutions.

• Offer consultative advice in security principles and best practices related to Sentinel

operations.

• Developing new Sentinel use cases, rules, correlations, and dashboards to meet customer

needs.

• Design and document Sentinel architectures to meet the customer needs.

• Assist customers with Sentinel sizing, Architecture, and client technical meetings.

• Deploy and configure Sentinel platforms as per Vendor guidelines and industry Best Practices.

• Assist client with technical guidance to configure end log sources in-scope to be logged to the Sentinel.

• Verification of data from log sources in the Sentinel

• Document the build of the Sentinel solution.

Mandatory Requirements:

• Experience with Azure Sentinel SIEM platform. The person can have prior experience in other

common SIEM platforms as well, but recent role needs to be with Sentinel as the role is

expected to work only on this platform. Minimum 10+ years’ experience in a similar role.

• Experience of atleast 15+ years overall IT experience and atleast 10+ in Security working with

Multi SIEM or Multi Cloud Environments

• Hand-on Experience in KQL with writing Use Cases in Sentinel.

• Need the person to be working in Sentinel building Use Cases for atleast 2+ years in the last 3 years. Should have built use cases in other SIEM platforms other than Sentinel prior to the move.

• Familiarity with different security attack vectors and means of protection.

• Need the person to be hands-on in ADX (Preferred)

• Configuration, data onboarding, and ongoing management

• Devops experience (Preferred)

• Should have worked with CXO leaders in various organizations.