Microsoft Security Operations Engineer
Summary
SOC engineer (3-5 yrs experience) who monitors, triages, investigates, and responds to security incidents across the Microsoft security stack — Sentinel, Defender XDR/Endpoint, and Entra ID — including threat hunting, KQL detection-rule tuning, and vulnerability management support, onsite in Chennai.
JD:
Role Overview
We are seeking a proactive and analytical Microsoft Security Operations Engineer with 3-5 years of experience in cybersecurity operations. The ideal candidate will support security monitoring, threat detection, incident investigation, and response activities across Microsoft's security ecosystem. This role requires hands-on experience with Microsoft security technologies, strong analytical skills, and the ability to effectively manage and respond to security incidents in a fast-paced environment.
Key Responsibilities
- Monitor, investigate, and respond to security alerts and incidents using Microsoft Defender XDR, Microsoft Sentinel, and Microsoft Defender for Endpoint.
- Perform incident triage, analysis, containment, and remediation in accordance with established security procedures.
- Conduct threat hunting activities to identify suspicious behaviors and emerging threats.
- Analyze security events, logs, and telemetry data to detect potential security risks.
- Develop, tune, and optimize Microsoft Sentinel analytics rules, workbooks, and KQL queries to improve detection effectiveness and reduce false positives.
- Investigate endpoint, identity, email, and cloud security incidents and recommend appropriate remediation actions.
- Monitor identity-related security events within Microsoft Entra ID and support access-related investigations.
- Collaborate with internal teams and stakeholders during incident response, root cause analysis, and service restoration activities.
- Support vulnerability management activities and assist in tracking remediation efforts.
- Maintain accurate incident documentation, investigation findings, and post-incident reports.
- Contribute to the continuous improvement of security processes, detection use cases, and operational playbooks.
- Stay current with evolving threat landscapes, attack techniques, and Microsoft security capabilities.
Required Technical Skills
Microsoft Security Technologies
- Microsoft Sentinel
- Microsoft Defender XDR
- Microsoft Defender for Endpoint
- Microsoft Defender for Office 365
- Microsoft Defender for Identity
- Microsoft Entra ID (Azure AD)
Security Operations
- Security Monitoring & Event Analysis
- Incident Response & Investigation
- Threat Hunting
- Log Analysis
- Alert Triage & Escalation Management
- Vulnerability Management
Technical Competencies
- Kusto Query Language (KQL)
- SIEM & XDR Operations
- MITRE ATT&CK Framework
- Windows Security Concepts
- Identity and Access Management
- Network Security Fundamentals
Qualifications
- Bachelor's degree in Computer Science, Information Security, Information Technology, or a related discipline.
- 3-5 years of experience in Security Operations, SOC, Incident Response, or Cyber Defense roles.
- Hands-on experience working with Microsoft security technologies in enterprise environments.
- Strong understanding of threat detection, incident investigation, and response methodologies.
- Experience analyzing security logs, alerts, and endpoint telemetry.
Excellent analytical, troubleshooting, and communication skills.
Interested candidate please share your resume to gayathri.arunagiri@movate.com
Regards,
Gayathri Arunagiri