Security Operations Engineer

Security Operations play a crucial role in ensuring the security and integrity of our IT infrastructure and data. The close collaboration with our Information Security team covers the design, implementation, and maintenance of our security solutions, with a particular focus on Sentinel, Azure, and Microsoft 365 Security.

This role requires a deep understanding of security best practices, cloud security and security tools as well as the ability to proactively identify and mitigate security risks.

The focus is on safeguarding the organization's digital assets and ensuring the integrity, availability, and confidentiality of its information systems. This role involves monitoring, analyzing, and responding to security incidents, as well as implementing and maintaining security technologies and platforms.

The Security Operations Engineer will ensure that security measures, defenses, and counteractions are in place to stop and avoid internal and external threats on company’s systems and platforms.R

Responsibilities: 

SIEM solution (Microsoft Sentinel):

Assist in developing Sentinel playbooks to ensure visibility on possible threats and attacks.

Develop custom Sentinel queries, dashboards, and alerts to detect and respond to security incidents effectively.

Collaborate with cross-functional teams to integrate Sentinel into various systems and applications.

• Cloud Security (Azure):

Assist in implementing and maintaining security controls in Microsoft Azure to protect cloud resources.

Monitor cloud environments for security vulnerabilities, misconfigurations, and suspicious activities.

Work on identity and access management (IAM) policies and security groups.

• Office 365 Security management:

Work with the team to enhance the security of Office 365 applications and services.

Monitor Office 365 security incidents and alerts, including threat protection and email security.

Investigate and respond to security incidents related to Office 365.

• Microsoft Defender:

Investigate and respond to security alerts generated by Microsoft Defender.

Stay up to date with emerging threats and security community updates to enhance endpoint security.

• Security Monitoring and Incident Response:

Continuously monitor security logs and alerts to identify and investigate security incidents.

Collaborate with incident response teams to contain and remediate security breaches.

Document incident response procedures and contribute to post-incident reports.